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1 

im-m i ] a- m^miE^mmft'm&v- 
^xmmt^-^xfu^y^im&jLt, me 
a- m%%oiE%mm*ft5rcib£%v&mffiM. 
mm i m&,±t, mwmmmzvnmtLm^ 
immmtf i m&Ltmt^tirc i c a- f*^^* i 

C A- KiS*T*o T, MEA- FFM^fl 1 ©B|E 

m<Dxiim?L%mmxti^mt, mmi ca- 

Ftafl^fi^A-Fl&tt^S^ MfSHg^lbBfEE 

mmm- m^m^m^ «t dme i c a- fa* 

6«BLT, MIB^lOBfllS^T^fbLT, £|2 
<DHSIE#*§*£j£U £/£LfciI2<DBfIE#^£MfBA 

- K^**fr¥gt«t Dtuia i c a- Ffcgffl-rassg 
Ma^Mm, mei c*-Krta5-eMiHS2 0Ht 

KS^Mf BMiJBf 8E## t -a L s ME^- 

\£7.*iEmm%z£m?iktt2> i ca-f^* 0 
[is*a 2 ] me i c a- fa e. l tz.mmmm 

EA- KK*»t¥St «t »3 MIE I C A- FA5>H*£ti 

•zimtz z.t%mtt%m%m i kibko i c a- 

FS* 0 

MEH 1 0H&E#^*ffl^TB&^{fcLfcfe<D-efc 
U, ME^HSfiS^m, MEBf^fbBfflfi^ ME 
% 1 OBSIE##*ffll^Ta^{kLfcT-*t, MiBias 

6n«KfflB*2 0B&IES#«, MEf0SiJB§§E#^#L 
v > i: W»r t S c i: *«fSI fc f 5 it^S l S yc (i 2 
tsa*oi CA-FS*o 

[tt^il 4 ] A— FFM#©E3ffi«*S&*- 
tT X ^ffiat -5 -9— e X A lfflfcLh fc , Ml b 

A- Kmt#OEStt5l^*fT7 fcft tffl^SfflS'JBIIE 
S^B^ffbL/cBf-SffbBflES^A' 1 {@W±ffi'I2ft/c 

I CA-F«\ ME«fE#^£f£t : LTi^-b 

y$mwmm% i oa-f^t^t, mea- 

tufS I CA-F^JIfi^fi^A-Fmtt^ 

st, hy-^^LTMiB-by^SBtaff-rs 

iHI3M&^ MEA-FSMi^gfc^MEI CA 

- FA p.IS*I±1 L/cMEBf-stfbflfflS^ MEfg 1 O 

BfE#^?n^ft:bT, mzmmm^^u me 

II 2 OBf SES^MEa £ t) luE-b >*8Wc 
S€t § 8&g J&S^g fc £ff x , tuE-b > * SB TluE 
H 2 ©Bf f!#^ME WJB#tI#^ fc -a L fcJ§£lc , 

tuE^-ex^E^Ttact^iitfra i ca- 

Fffl*c 

[1115] ME I CA-FAP»M#b/ctflB*«a 



(2) Wffi 2 0 0 3 - 1 2 3 0 3 2 

2 

LT*<1fl«*«#a*8^ MEBf^ffcBfES^^M 
S*-KK*»f^atiDMiai CA-FA&H&fii 

lt, u ffiffim^mctm 

L/tMIBB|^fbBfES^^S!^ffibT, $ 1 OBf|l#^ 

T-'mtzctmrnttzimmnzimvi ca- 
[n*«6] MEBf^ibBfiiEs^tt, tmmmm 

MESf 1 OBfES^^ffl^TB|^ftLfcfe©-efe 
10 t), MEttffffia^fm, MEBt^ftBftES^ ME 
m 1 ©BHES^^ffl^T^{kL/cr-^t, MESS 
lf-^ffiL( tf££ftTl,vm£ MEfl^fbLTff 

e»n§MEH2 mmm, mmwmm^tmi 
^tmt%ztmmttutm5Em<Di ca- 

FS^o 

[fl#« 7 ] A— Kffi^OESttSiKff&g&tf- 

Hx^®at-§^-HX7 p D^A^ i m&±t. me 
a- FpM#©Eattai^ff 5 kibicm^mMu. 
i f@Jx±t, mmmmim^mtbtcm 

20 fbHIES^^ 1 fSW±E'»^tifc I C A- F t, MIB I 
C A- F£ffl^TME^-ex£MEA- FFM#fcif 
«t5 I CA-K«*i:^e.*5^XrA{tfe^5*A 
BE&ffiTfetjT, ME I CA-FiS**\ MEBf-^t 
BIIIS^^ME I C A- FABK^ffit^axf 7 7" 
^ ME I CA-FiS*^MEl CA-K^5tt»ffiL 

fcMEBi^bBiiis^%s»t§5aaxr7 7^, me 

A- Fff ff#A^ME I C A- mmc% 1 OBfliES^* 
A*t5fflaxry7i:, ME I C*-K*8*tf*«L 
TV^MEBf^fbBfUS^^MES 1 ©BfllS^Til^ 
30 {kLT^2©BtIIS^^jSf5®aXr-y7"t, ME 
I C A- Fisy^MEfg 2 ©BIIIS^^ME I C A— F 
(CilitLT, ME I CA- Frtg|5TME^2£DBffiES^ 

Ef Sfft 5 Max -f >y 7° t C flt 1 1 % * 
AISII^So 

[»*S 8 ] A- FFiTt#©ES«S^S^:-9— 
t"X*5!iat?.-9--l:X7 0 n^7AA'lllW±ts ME 
A- FFM#©IESttl!£ff 9 /cJ6tfflv^5f@BiJB|H 

s^^af^fbb^Bf^fbBifis^^ i mumztik 

40 I CA-Ft, ME I CA-F?rfflV^TME-9--HX^ 
MIBA- KpBttWS I CA-Fi|*t, ME I 
CA-F4SSt*7 F7-x^/rbmi^tiT^TM 
E»ISE#^£f3f LTt/^-by^aii:* 1 ?)^^^ 
X-f Afc&tf^AggHTjffiT'feoT, ME I CA-F 
fflS^MEHf^fbBflES-^^ME I C A— FABf^ttj 
■TfflaXT-y7t, ME I CA-F4b*^MEI CA- 
F^e^*ffl L/cMEB^fbBf ES^^Saf SfflSX 
f7 7fc, ME A— FffiSt^ME I C A- K4g*t^ 
l O^IES#*A^t55aax-f Vft. ME I CA- 

50 FS*^StbT^§MEB|^fbBfH#^*MEB 1 <D 



3 

MIB^v^fittt^fSLT, MfB-by^gBT-ffllEH2 

om ES^^MiBfasijBf ie#^ t -a t tuts 

LiiM>K'i'i 9 ] A- FpM#©IE3MTO«&^- 

trxfcfflstsu-- t7>?u9vhtt i flfittk^ Mis 

1 «W±i:, MMiJBfES^Bf^kLfcBf^ 
{tafE#^ l fflJjLhfc, MIBBf^tiflEii^ta-f 

§ bi nn^t a tu 9=7 h t mzm a nrc i c f 

tMBl C*-F£ffl^TMIB-9--ex£MIB*-F 
^t3#AI?JK&-e&oT, MIS*- FFM#tfMIB 

i c*- F4§*fcjg i ©HfE#^^A*-rssaaxr^ 

7°£, Mia I C *- FS*^Mte^ 1 ©Bf fE#^£MIB 
I C*-Ffc^Mt3MaXry7°i:, MIBI C*-H 

IE#€*£jSLT, MIBI C*-KiS*fc3SMt«fiia 
Xry7°^ MIBI C*-F^*^MIB^2 0Bf|ES^ 
£MIBI C*-F£gfiLT, MIBI C*-Fl*lg|5T'M 
2 ©Hf EES^MIBfBSiJHf fcHRLfc»S 

C»*5C 10] *- FFM#©IE3ttI3**g&^ 
-ex^ffiatS^-ifxyn^Atf lfil-Ahi:, M 
IB*- Fffi*r#®IESft5S&*fT5 fcfcfc JB^SlHSiJHg 
ffiES^tf l ffltlhi:, MIEf@giJBfE#^£Bf^{t:LreBg 
-^{tflfES^' l fflJ&tfc, MIBBf#fkHflI#^%ta 

r§BiiiE#^wayn^At^fa'i?n/c i c*-f 

t, MIBI C#-F«^TMIB^-t:X£MIB*-F 
m^#tffi#tt5 I C*-F*1*^?>&^>XtAIc 
^t^AISETJ&T&oT, MIB*— FffiJt#^MIB 

i c *- F4g*£® i ©hi tm^xtit^m^T-v 

ft, MIBI Ci-FStiiei ©Hg : HSH§-£MIB 
I Cfi-FlcMEtmmZTyft, MIBI C*-F 

m-m^m mibhi e# wi7° n 77 l mmt^ 

Itmm^ZmKW l ©ffiIE#^f1I^ft:LT|g2©iig 

iim^f&tmm^Ty-ft, mimimfo? 

7itf, MIB+f-E l X7°n?^At|g2 ©BfE#^£iI 
ft L T, MIEU 2 ©BfES^MIBWJHf E#^ -a 

[IlsRiii l] *- FffiW#©IE3tt»RtfiSBatf 
-H"X£®a"f S^-tixyn^A^ 1 f@W±t, M 

ia*— Km^#©EattSBB*ff 3 fc*tffl^*fflgijii 

aE#*§# 1 l!W±^ MIBfBSiJB|II#^^^gptf±i^1- 

§ c fc^n-rsit i ©Bin#^i: wi^nfc i c * 



(3) #12 0 0 3- 1 2 3 0 3 2 

4 

- F^ffli^TMiB^-ex^MiB*- m^^mm 

SIC*- KHHrefc^T* MIB*— FFM#^il 2 © 
Bfffi#^©A7J*lTX§B|E#^A*^Si:, MIBI C 

fi-vmmfio-tj~mfrm¥®t, mibh2© 

HfES^MIBI CA-FS!&»^lgfcJ;DMISI C 
*-Ft^flLT, MIBI C*-FrtgPf\ MIBH2© 
BfES^tfMIBl? 1 ©BfE#^-g?L/cl£^ MIB 

wmies^mib i c * - m^^^mcx^mn 

U MIBMiJBfEll^^MIB*- FSc&tt^lSfc <fc D 
10 MIBI C*-Ft^{=LT, MIBI C*-Frtg|5T*©M 

timmsmmnm^mjjLrci^ic, mib-9— ex 

§ I Cfc-KS*. 

[MaRiM 12] FFM#©IE^ffi»^gft+>- 

IB*— FFM#©IES'I45«It9 fcftfcE^SfflgijBg 
ES^tf 1 filAbt, MIB«JBfE#-f ^gptm^-r 

§ c i ©Mf^, %Lmmmwt 

zmmfuVvLtmmiEtiTc i c*-F^ffl^TM 
20 la^-ex^MiB*- vm%\cm?% i c *- fs 

*£fe^T» $ 2 ©4fttPg£MIB*- FFM#fr 51 
^3CfcffTt«£#1ll^*tt!?¥8^ MIB I C 

*- f tmmn o *- F»#»t#afc, mieu 2 © 

£ft1f?S£MIB I C *- KR*»*^gt i. <9 MIB I C 
*-KE3SSLT, MIB I C*-Frtg|5T\ MIB^2© 

£mmmm% 1 o^flwafc^Lfcu^t, mib 
wtfi#^%MiB 1 c ti— mfrwzmic x mm 

MIBI C*-Ft^lbT, MIBI CA-FrtgPT©M 

30 EimmmmmsmpjbfcW^c, Mia^-ex 

5 I C*-FtS* 0 

13] mibs 1 ©tftit f gfe i tfMian 2 © 

t|Btic©I C*-F4S*„ 
[0 0 0 l ] 

mmmtmmm mm&, i c*-f*^ 

T+ABHStrft-j I C*-F4ffi*SSfc<fcr;*Aig|E 
40 ^giCltSo 
[0 0 0 2] 

[fl£*Ofi*] I C *- F iciXb-D 

•Z!£.<,nRL-o~D&% a cnttl C*-F{ct±, IE1I§ 
ft^Att\ BgWI*t*^i5:afcJ6©MM; (V 

ofel C*-F^, ^->XtA^#^EH^S/XtA^ 
50 ^lR]±?-tJ:fc^, lM*-FT'tt^HT'f^ofciTt 



5 

v^e**£ffiL;fcDt5Ci:ffT?t3 0 M%.\£. ft 
i: LTfittS I DA- F^Sfte&ItlE&HibW 

[0003] i c*-f«, ^oimssjcfctK &m 
tgspfb^nrv^o &«sn ca-fh\ i 

SO (International Organiza 
tion for Standardization: 
HSgMtSit) T\ I S 0/ I E C 7 8 1 6 £ LX 

WWbsnrv^*, i so/i e c 7 8 1 6ts^< i 
[0004] d d t\ i c a - F-timxmmtz 

3VVKJ:l/X^m APDU (Appl i cat 
ion Protocol Data Unit) £ I/ 1 

SO/I EC7 8 1 6T*f£LTl/^ 0 S 
fc, I SO/ I EC 7 8 1 6fcS"3< I CA-Ffct H 

[0 0 0 5] 11 3fcfc^T, ±77^;b (MF) 9 0 
Ott, fthfflJI«D77'f;I/"e*»J I C*-Krtt— Of£ 
##£U *0Tfc*R0*JB77-<l';l/ (DF) 9 0 1 
A, 9 0 1 B, fciffg 0 1 Ctf#fif5„ Iffl7r^ 

T-9— ex7n ex^Tt^g^ 
r-* GWT-9— H'Xr-^tBf^') A*&fflSn3„ 17 

%77<<Mti c*-Krtfcffi»#SRrtgft<D-e, lit 

77l , ;l/t««-r5J:fcT, 1 fed I CA-FTl^© 

[0 0 0 6] W£©'9--e^7'D^7i»*SlfT-r*fc» 
fctt, ff*l*A\ APDUJ&Son^VFfcLTJSS 

^-t£77n^AAmffi£nTi^lM7 7^^ 
AU>F077-<;bi;LTSS?t'5o cntit), *n 

So **ffl7 7-r;w±, 7 7 a ^usu 

? («TA I Dfcl&t) fcnftfftS I DtCfcDftgPfrP. 
li, A I D^StSClfcT, #5£©llM77^;l/£S 

[0 0 0 7] ST, I c*-K*ffli^T-9--t:z*sij- 
A- Fjfpf #*Atf *C>A- F*ffiffl LTi^S 
u £ OBE*frft 5 £ 5 t) , c © 

fcfetfr 5 I£JIfi*AfSiE £ ff tf tt5„ *A!SIE*^il 



(4) #M2 0 0 3- 1 2 3 0 3 2 

6 

f*fc»0*Si:LTtt» P I NfcPffcfnSHgiES^fc 

3. PINBEfctt, A-Fffi#gtfA7Jbfc:P I N£ 
I CA-FftfclSllLTl^P I NfcP,S£T5 r*77 
Y>PI NUIEJ A-FFM#AA7JL/iP I N 
£\ F«7-££ftLT-fey*tf#8LT^5P I N 
kJi£T5 r^y^-fyp 1 nUEj fc#&5„ P I N 
HE& if ©#ARH*ff8: 5 C k fi> I C A- F©^IE 
I'Jffl * B&itt 5 fc E SST$ § o 
10 [0 0 0 8] 

icA-rawiife, It^ftir-ex^iftoi 

CA-FT?0fflT£S,£5k:ft3A\ -#T\ #'9— e 
X£?!]ffl-f£fc«>£P I N^IE*??* A-F 
jfr£#tttf-trxftfc:gft5P I N*lx.Tfc't, spjffi 

f&l4^afe5o iin&A- FfiJffl#©?iJ{Mtt*At < Si& 

[0 0 0 9] *CT, *f§BM, I C*-KBr#&ft 

20 aaso*- e^tsBtfc i c a- vm^rm-^ 
x^§i75±i-a-t, •9--trxfttffft5j2i®(iDSSP 1 

NUKE*, nm(0P I N£- o1^.T*3</c^T^tT 

tsfliiSK-rs c tT\ 1 cti— mm (omm±zfa 
[0010] 

30 ISA- F3ft#©ESttfil^*fr 5 /ci6tffll^»JB| 

^km«ES#^ 1 fIW±K1t?ti^ I C A- FfcfflV^S 
I C A- FS*A\ MIEA— FFJtW^*^ 1 ©H| 
OA^*fT^5miES#A*^Sk, fuIHI C A— Ft 

wmfi f )ti-mmi*m'kt, mi \ ca-fas 
w% l rcwmmm l t& < it is t , mmm 

ftli;i,.iFffr!J4riK: ; icA-- Fi!^|» t # ISK <k <9 ME I C A 
-FABl^ttiLT, MiaifffiS«¥l5t«»L, MIS 
tiMS^ SfcS^ LfcMISBf ^fkBlIIS^^II^tB L 
40 T, WiBS 1 ©BtII#^Tll^fr: LT, H 2 ©B|II#^ 
*4jSL, MfS|g2(DB§IE#^MISA-FS^*t^ 
StJ:?)WIEI CA-FtilMLT, MISI CA-Frt 
SPTMIBig 2 OB| !IS^ A^MfafBSUHfllS^ t-tLfc 

^^t, MfH+r- if zziE-mm % m>m m t * 

[0 0 1 1] *fg^T*{±, A-FFM#©EStt 

its** h: 7 ^jaar s if- h 7 7 p 9 ? h & 

1 &&±t. MIS A— FHfT^OEittStH^lTd te* 

icm^mmmimtf 1 f@w±t, MisfisyBtiis^ 
50 zmitLmmmmmtf 1 fBJ-x±isit^ti/c 1 c 
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A-Fi:, MfBI C#-F£ffl^TMfBif-ex£M!3 
#- FBrWtfcffi^rs I CA-KS*fcfr5a*^ 
ri*fc:fefrS*AWB5ffift fuf5 1 C*-FffiStfM 

iHBf^ft:BfiiE#-^^tufH i c a- F^&^tB-rsaax 

f'^t, MIBI C*-FS*^MI3I C*-Ffr5R 

t, MI3A- F&8 gfftm I C A- FJg*£« 1 ©Bf 
ES^A*tS®aXr7^t, Ml B I C*-F4a* 

mmLT^%m^{mm.mmm% 1 ©Bfiis 

k L Tgf 2 ©BfH#^££/&Tr § MSXr ? -f 
t, MSB I C A— F^S^MIBS 2 ©Bf fE#^*MIB I 
C*-FtSfgLT, MSB I Ci:-F[*]gtf-£MIBfg2© 
Bf EiWMMiJBf tm% t -a b fci§£K , MI3-9" 

[0012] -rftfc-s, ±iami*»ft , r3feii>fc:, * 

1 fflJX±£\ MIBfflBfflS^Bf^ftLfcBf^fkBftE 
1 ffl«±s2«Sttfc I C A- Ffcffl^S I C A- 
KSi*ff, MI3A- FPM#tfH 1 ©HIIE#*§0A2j* 
f?;i3BffiE##A7^!§^ MIBI C H fcafl*fx 
•5 A— Ftt*»*#gi:, MI3Bf*§{fcBfIiE#^£MI3A 

T, MfBBl©BffIS^fI^{tLT, H2©flfIE#*f 
U LtcW, 2 ©Bf fI#^%Mf3A- FR#* 

t¥SK«fc tJfflia i c a- Fts^i-siS^sas^Sfc 

MIB I C A - FrtffiT-MflH^ 2 ©Bf iE#-i§tfM 
IBfflBf fl#^ i: -a b fclSfc , MfB-9"— tf X £IEt 

[0 0 13] *|gfitt, ±IBI CA-FiiKfcfc^T, 
MIB I C A- FA^^Lfcltffi^SSIbTtJ < fffBS 
«¥&*KW\ MIEBf ^fikBf M#^£MI3A- FSr^t 
t^Kfci^MIBI CA-Ffr5l!*i±lLT, ItffSS 

Bt timm^m bx.m \ wmmn-mt % <fc a 

[0 0 14] t-mm, ±IBI CA-FS&cfcfcVT, 
MI3Bf^{tBffE#^«, MIEflgiJBHIS^t, #£©ffi 
fr£>;8:£@£ffiT-#i:£££Lfcfc©£, MIBIgl© 

Bfii#^^ffl^TBi^fkb/cfe©Tfe ^ , mmMmm 

MI3Bf ^fcBf fl#^ MIBIg 1 ©Bf 1E#^£ 
ffl ^ T&*§ffc b Tc t- % fc , MISHSflr- * #IE L < 
tf£i;ftTl , MfBS^fkLTt#e.n§MsB^ 2 © 
BffE#^ii, MfBf0SiJBiSE#^t^Ll^fiJ»f1-^c: t 

L/ o 

[0 0 l 5] ±!3BUi£8?&-r3fci6fc, *f», A 

-FpiT^#©iESttffiis*^s^-9--^x^j!aa-r?>- , t 

-e*7WvAtf l «K±^ MIB*- FFM#©IE 

mmmm^rMcm^mmmmwmitbk 



(5) #P»1 2 0 0 3 - 1 2 3 0 3 2 
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Bf^ftBffiES^ 1 fflEJ±iB«£ft;fc I C A- Ffcffl 
V\ MfBffiiJBflES^^ffitLTi/^-by^gBtlfi 
T£ I C A- FS*/b\ MSB A- FFMf tfH 1 ©BfU 
#^0A**fT*3B!iES#A*?ai:, MIBI CA- 
FtiIf§£fT?A-F»»t?¥fS^ *yh7-#* 
^LTMIB-t>^SKtfflffl-r§fflfI?Sii, MI3A- 
Fll*»* ¥g£ i D MIB I C A- Ffr 6 Sr&ffi L fcM 
SBflf ^{tBfSI#^£\ MIBfg l ©Bfflif^uil^fbb 

Ts mzwmmit^u Mi3^2©Btiis^^M 
i o tmimm^ <t & mib^ v 2 mm i^rnm % mwmm^ 

®t*M7L, MfB-tr ymWXV%2 ©BflES^tf'M 
IBf@SiJBili#^ -a L fcS^tc , MIB-9— % jE« 
MfitZZttbTco 

[0 0 16] *mm. ±131 C*-FS*£fe^Ts 

mib i c *- vti>m®Lfctimzw&LT*5 < mm 

9&mZfflf, MfBBf^jtBf SES^^MIBA- FIk^» 

^stiDMiBi c*-F*^i*ttjLT, mmm 
mmcWRL. mwmmmicw^brtmsmit 

20 tbfco 

[0 0 17] *%Kt±, ±131 CA-FSStfe^T^ 
KfflBHWftflMBWtt, Mf3<BSiJB|K##t, #£©t 
4 § HSfir- ^^LfttC?, MIE^ 1 © 
BfE#€£ffl^TB^§fkLfcfc©-e&D, MfBMS^a 
#aii, MI3Bf#{kH|iE#^^, M!3|g 1 ©BfliES^^ 
^T'm\tbtzT-Z\z, MEH^flr- * IE L < 

*^snx^nif, MfB^bLT?#p.n§Mf3^2© 
vmmmz, wmmmmimt^b^tnm^ c t 

fcLfc. 

30 [0 0 18] ±E3«S*»P^tSfcJ6fi:, *f§Hj§«, * 
- FFM#©IESW!I^S^-tt-e7^ffilIt SiJ- 
-TZ7Ju>?=7htf l ffl«±fc, MIB A — FBft#©E 

^tt6tis%ff?/ci6tfflv^fisijBiii#^^ i fro± 

fc, M!BfflBiJB|fI#^^B|^{[:L/cBt^{WffiE#^^ 1 
{@W±IB1t2ft/c I C*-Ffc, MIBI C*-F*ffl^ 
TMI3-9— ex^MI3A-FFM#KJii±i-r§ I C*- 

FSSfcA^ftS^^rAt^ttS^A^ESffi^ M 
131 MI3B|^ftBtH#^^MI3 I 

-F^Bl*(±iTfflaXr77 0 fc, MIBI C*-Fig£ 
40 ^MI3 I C A- F^Sl^tti bfcMI3H|^{kB|H#^* 
Sai-^MXr-y^fc, MI3A- Fffift^'MIB I C 
fs— FiSII*fcS l ©Bf E#^£A*-f §®37.t 7 7° 

MIBI C*-Fffi*#'S»LT^3MI3BfTOf|E 
S^^MIBf! I ©HfHS^^ifkLT^ 2 ©Bf Wm 
*4j*tSffla^r f^fc, MI3I C*-Fi|*^MI3 
^2©BfU#^MI3I CA-FtSflbT, MIB I C 
A- F^gPTMIB^ 2 ©Bf tIE#^MIBfB§iJBffI#^ 
-Sfbfcif^ic, MIB-9--lfX^IE^T-r35aaXr 

50 [0 0 19] ±I3IS,l£i$$-WcJ6fc, *ISHj!tt, * 
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-tfXTWvAtf 1 «K±fc, tuiH*— KBr#*©IE 

HI *tfbB&IE##tf 1 fflELkiEtttSftfc I C *- F fc, M 
IE I C A- F£ffl^TMIE+J— t:X£Mia*- KBr#t 
£Ji#f 5 I C*-FS*fe, Ml H I C*-FS*fc* 

AISIE£i£*\ MIS I C*-F^*A^MKB|^ft:BgiES 

^*Mta i c*-F*^St&fflt£taxf-y7'^ Mia 

I C*-Fi$**MtuI3I C*-F*£>lc&tiiL/-cMiaHf 
^bBifIS^^Sat§M^7 L 7 7'i:, Mta*-Fffi 

jft^Mia i c Kffii*ts i oHliis^^A^its 

laHf^fkBiES^^tijiag i o^iES^?«^fkLTg 
20HiiiE#^%4fiici-§ffiaxT7yt, Miai c*- 
fs*^ Miaig 2 ©Hfiis^^tufa-b ytmic %m t 
t, MiE-tr>?g«-?Miaig 2 ©pffEt^Mfafflgijiff 
lES^t-aL/tti^fc, tuta^-e^^E^ff-rs 

»axr >y 7°£ J: 3 fc Lfc„ 
[0 0 2 0] ±IEI»/$$-WcJ6fc, #fglBH\ * 

- KBf*#OiEStt«B*«£3!!8:-9-- If X^ffiaTS^ 

1 ffl«±fc, Mia*- FBr#t©IE 
3ttJWB*ff 5 fc»fcJB^8fflfflliSIE#9tf 1 fflfiU: 

fflw±fc, Mia9i^it:Hiiis^%tai-sffiii#^ta 
7 p D^At^iatt$n/ci c*-Fk, Miai c*- 

FfcJU^TfMEtf- HX^MIE*- Fffrff#fcSHK-r -5 
I C * - FS* £ B & § v' 7. r A 1 1 3 * ASIES 

S*\ Mia*- FFM#^Mia i c a- f«*ic£ i o 
BfiE#^^A*-r§®axr7yt, me i c*-f*s 
*tfMian i owmimmm i c *- Ftj^tsffi 

a^r-yyt, Mia I CA-FrtT'^T^tiSMiaBill 
S^ayn^^A^fuEHf^fkBHES^^MiaS l © 
Bf lES^Til^ftLTfg 2 ©BffE#^3l$ LT, ME 
I C*-Fi|*fc}lfif?.MaXr7 7 0 t, Mia I c* 

- FisA*';n:,;!^ 2 <DBgfE#{§ £MIE I C *- Ft sift 
LT, MIHI C*-Frtg«IE!g2©Bf!E#^MIS 
»JBf fE#^§ £ -gj l fcifSfc , ME^- e **iE*£l 
fit 5 MX f v 7° t J: -5 Jc L fc„ 

[0 0 2 l] ±EfflM*ISP}fc-r5fc«>fc, * 

- FFM#©E3tt5i!^^S^-9-- e**fflg-rsu- 

- t: X7°n fvhif l ffl&lt fc % MK*- FfM#©IE 
Sttii^fi? fefttffl^SfflSiJBgSES^*' 1 fflJGU: 
fc, MiafflSljBtllS^^Bt^ftL/cBl^ftBfllS^^ 1 

fiw± fc , MiaBi^ftmiEs^^wa-r §HtiEs^ta 
7 p D^At^fais$nfci c*-Ft, Mia i c*- 
F^ffl^TMia^- trx^Mia*- vm^mm § 

I C * - FS* t *> 6 ts. & is X t A t £ § * ABIES' 

ffitf, Mia*- Fffi& t^'Mia i c *- K«*ts i © 
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^mn^xtitmmxTyft. Miai c*-f*i 
*^mie® i ©BtiE#^£Mia i c *- Ftciif-r^M 
mx^y-ft, mis i c*-FrtT^fi^n§MiaBiiE 
s^wa7°n^vA^MiaBi^fbBfiES^^MiaB i © 

B|E#9TS<HfcLTS 2 ©B||E#^*4Ji-r§Max 
r>y7°fc, MIEBfIE#^f7°n^A*\ MIE^-t£x7 
P^AtC®2©BtII#^^flLT, MIE^2©BfSE 

s^^MiafisoBt mm t -a l , Mia^t- e 
io [0022] ±tmmm®:t%mi^ *%mte, * 

- FpM#©IESffiiI^i&g&^- trx^jas-r 5^ 
-lf7.7°D^A^ 1 fflW±fc, Mia*- FFM#OIE 

H 1 ©HIES^ i: ^IHH^nfe I C *- Ffflv^TMIE^t 

-^zmmz-m^icmmz i c*-f«* 

Mia*- FpM^^lg 2 ©B|II#^©A*^fi^. I> 

BfHS^A*^gt, Mia i c*-Fta{f^ii3*- 

Miaig2©B|IlS^^Miei C*- 
20 K^##£?Kfc J: t) ifflB I C *- Fic^ffLT, MIE 
I C *- MfEffl 2 ©HilES^A^Mia^ 1 OB| 

E#3f:-8Lfc»&^ Mfaf@giJBliE#^%Mfa I C 
*- H«** t¥SK J: D ■ L, MIEfflSiJBi-IIS^^ 
MIS*- F^*»#¥Sic ± DMIE 1 C *- FtSSSb 
T, MIE I C*-Frt^T©MIEf@J5iJBfII#^©H,l^ 

[0023] immmmm^tcibic * 

30 -tfx7n^7A*nfi«±t, M!B*- FpMitOE 
Stt»If^fi9/cJ6tJlV^f@SijB|II#^^ 1 f@i^± 

MiawjBiiEs^^^tffi^-rsc: tmmtz 

t^iaif,2ti/c I C *- F^ffl^TMia-9— H~X%ME 
*-KmW#tJI^-rS I C*-Fi|*^ S2£D4f* 
■If H2£MIE*- F3t^#*^I!^5 c: i: A^T't 
WmmL*)¥-Wi.£, MIEI CA-KtlfS^fi 1 -?*- 
F^*»t#Si:, MiaS2 0^f*'li^MEl C*- 
F^*#t#SK iOMEl C*-Ft^flLT, Mia 

40 i c*— f rtspie, Mias 2 o^ftit fg^Mian 1 <D4 
ftifSfc-aLfc^fc, Miaf@sijBiE#^^Mia i c 

*- F^*» t^St i t) M#L, Mief@SiJBtIE#^^ 
MIS*- FH#*##S£ <t "9 MIE I C*- FtjMff L, 
T, Mia I C*-Frtgp-e©MIEfffijyagIE#if©Be^ 

[0 0 2 4] *Mtt> ±13 I C *- F4S*t4o^T, 

Mia^ i ommm&mmzn^Mmt lt, 

50 [0 0 2 5] 
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BM3l/Ct><, ll^ OT©IWftT8, SMS© 

fc, «T©l«f§T8, I CA-KfcOIBTjaS 

fit53V>K(i, APDUJgiS©:iv>F£S£L 
Tl^3#, A PDUJgS03WF*ffl^S Cf:l±*^ 
fflfcj2S4SiT?tt^< , A P D UJBSfclWffOattl* 

8& < , *ASH%ff ft 5i«*-efen^*%Ki±3ifflnr 

[0 0 2 6] S1\ Si OSflSBffitOV^TlMK-rSo 

0 1 #AESE#fr ^%1MM^t>^ I C A- F 
*±tfflH*0*lJ«*^-r. HlfcfcVT, *AI21E8, 
B#f«S* lOOt, I C A- K 1 0 1 fe, *- FffiW£ 

1 02fc, (SSI 0 3t, *-yF7-^l 0 4 t©fl§-? 

tT^n§o m i k.*Litmmt, *- ffm# i o 2 

tf, I C *- F 1 0 1 %Jf^T, *?v*--f>* V'Jv 

A'oT, 0 08, I C*-Ht«fc5Ra«||| 

OATM^SSLTt/^o IC*-Kl01tt, 
*Fv*»»f>* U7V F*- F^©t£5<©+f-t:7>%g 
ffiT*t§l«t%on^„ A-Mtll 028, * 
ASIEOfcfetflefflf* P I NT'feoT I C*-F 1 0 

1 ^affi-rssso-y— exT-itat^-et s«a p 

I N 1 0 5 ESbTli^feOfct*. 

[0 0 2 7] »S*1 0 OOrtSWjtflifc-O^T 

iKwtSo mm^ \ 00 8, *-FSc*»t^si 1 
0, mmm^m m, 112, pi na^ 
¥gi 1 3, tit$B«*fgi 1 4, sfmsi 1 5, a 

ff#Sl 1 6£#t£ 0 

[0 0 2 8] A-FH&tt^gl 1 08, ICA-F 

1 0 1 tiifrr 1 c*-f 1 0 1 {cnv>F 

%jMf (»jA&) LfcD, I C*-FA^U7,4-°y7,^ 

[0 0 2 9] StSMas^gi 1 1 8, $Jx.8V^n7 
n -fe y V 1 7u 9*7 LWl* * U 6$ 1 , 7° u 9 s ? h, 

mm i o o±wmmu mmmmmmm 

[0 0 3 0] 1 1 28, *- FFM# 1 0 2 fc 

[0 0 3 1] PI NATJ^K 1 1 38, *- FF/r#f 1 
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[0 0 3 2] 114 8, I C*-F 1 0 1 

F7-7 l o 4fr5Btf§Lfc1i$8, £3^8, * 
- FBfS# 1 0 2 -^JfiM 1 0 3 tfA* Lfclfffifc-Rf W 
*SV^I4jJciKW£^ltsafil«tL, 0fl*fcfM- Fx 

[0033] gff^g 1 1 5 8, jgs i o 3tfmmm 
io A^ffi^nSo 

[0 0 3 4] fflff^g 1 1 68, *<y F7— 1 0 4% 

1 0 0^MiWATM^©fi£Aiffi*©tI^±, J»f£f 
gl 1 5BfKTfeJ;<, j£*l 0 3fe#ffibft<TJ; 

T^7TSi3ft±f^8, fflfl^gl 1 6{±«8<Tfe<fc 

[0 0 3 5] I C*-F 1 0 1 OrtfflijSKoV 

20 tPlt§„ I C*-F 1 0 1 8, aii^gi 1 7, '» 

iwi 1 8, ssffla^ai 1 9%rr5o 

[0 0 3 6] Ifi^g 1178, ftiSffl* 1 0 0©£- 

Ktt»»t#s 1 1 o tmmm^\ a»*s* i o o 

[0 0 3 7] If 1188, I C *- F*^ft 

WtiKffltitZimZGU MZlf, ROM (Read 
30 Only Memory), RAM (Random 
Access Memory), 7yy i/o.^ : EV^<D 

[0 0 3 8] iStgJQg^&l 1 98, T^^nyn-b-y 
if*ffl^5ci:T', I CA-F^{*Oi|iJfP%f]i9, «fg 
«¥Sl 1 8(«^nT^S7°n^i,^Tt§ 

[0039] mcs ^mmmicmz i c*-f 1 o 

licM^tl^««©ffiiS%H2t^to 0 2 8, ic 

*-f i o i mmz>\mmmm$ \ \ m^yr 

40 -f^Wfj^T^D, ±77-Y;I/ (MF) 1 2 0, »ffl77 
4)1 (DF) 1 2 1 A, 1 2 1 B, 1 2 1 C, fcitfP 

i Nta*ffl77^;n 2 2frBM?ti§ 0 cneo 

77^;l/8Pg«lf5gtftoTfei9, ±77^;H 2 0tf 
l±ffitffilL, *OT{Mt, flfJ7 7^/H 2 1 
A, 1 2 1 B, 1 2 1 C, feitfP I NigHE7 7l' 
;H 2 2*Mfi«f?.IMi:ftoTl^„ ZtiZtiomRl 

[0 0 4 0] *ffl77-f;H 2 1 A, 1 2 1 Bfe 

50 <fctfl 2 1 C^rtSPIMtO^TlM-r^o HH7 7-1" 
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X^O^l 3 1 At, COftS¥U--e^{C*^T* 
ASIE**7v-f VP I NBBfc«fcD*fTT5fc»fcj& 
g£r-£7?&§, «S!|P I N 1 4 1 A*qfflft?nTV> 
So |i»HJB7 7^;H 2 1 Bfctt, -9— IfXTW 
vh 1 3 1 B fc, MOP I N 1 4 1 BA'fttt^nTV 
5c f ft, HW777;l/l 2 1 CKtt, tf-lfXTW 

3 1 ctitj^ffsnsasp-y— t:x«, *AiiSEtb 

T, *>7<T:/P I NffiaE*fT&3fc©i:-f3. Lfctf 
*ffl7r-f;H 2 l crttfi, P I Nr-*lil& 

[004 l]fe P I NtaHffl7r7;H 2 2 to 

^-dHurrs. p i mmm^77-fjvi 2 2a, pi 
Nwafflo9ffl77-r;i/-e*ao p iNtanffl7W 

;M 2 2tl4, V-ttfxifvkl 3 1 A, 131 
B, fe^tfl 3 1 CTffilBiJtffiffl-rSfiiSiJP I N£«S 
fS P I NffiTW^A 1 3 2 PI NWS7n^ 
7A 1 3 2*Wf .5f-*7&3, P I N^Sr-* 
142A, 1 4 2B, j5±tfl 4 2Ci:tff&*fiS*aV 
§ 0 CCTP I 1 4 2 Att, -9--Hx7n 

^7ii 3 1 Mc^^mnsn^tyy-fyp inre 
t<&S4r-*«^snTi/'»s. p 1 Near 

1 4 2 Bti, "9— e*7W5£ 1 3 1 BfCjcOH 

mmt77^yp 1 NKKtjMiftT-*^* n 

TV^5. Sfc, P I NESt-* 1 4 2 Cf±, 17- tfX 
•JWfyh 1 3 1 ClCkVMfZtl&ty^'fyP I N 

[0 0 4 2] <I<Df#0Jim 1f«S8(#gl 1 8(Ctt, 
3O0-9--^^7a^7AA^S tiTi^T, P I Nta 
7d^A(±3O0P I NWSr-*fcWSLT^3#| 
Stft^Tl^tf, ffi£Og[©-!r--tfX7W7i»tfS 

I C*-Kl 0 l^4fi©-9"-tfx7n^-7A% 
$t?ii£«, PINWSTWvAtt, 4{@©PINt 

ar-^%watntf«tv\ s&t, *%^{±, ica 

— F 1 0 1 \H<D*f-\i7,yv>fyhft*y : 7'<y¥ I N 
ISII^T^atMTSoTt, *77^>P I NRIE& 

[0 0 4 3] *f»i»f7§P I NW37n 
^7A 1 3 2tfWgLTVVSP I N§ax-^©tMt 
ffifflTJStOV^T^LTlKo S1\ P I NWar- 
^OlMt4jS^Jl%El3fcStc 03tc£;^T, PI 
Ntfflr-* 1 4 2tt, A I D 2 0 2 UM7y^2 

o 3 t, igmtrnmp i n 2 0 ^^tnsn&Sfcfto 

Tl/^o A I D 2 0 2&, PI N§3r-^ 1 4 2tfft 
)SLTV^9--H77n^A^M^tlT^§*ffl7 

0 3 {± P I Ntar-£ 1 4 2 tfitfctS P I NISIE7J 
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»77)'2 0 3fc 1 tT>y h£fJDSTT, l~0J ©if 
^tt^-y^-T VfflOfflBUP IN, r l j ©tl£&;t77 

-offlofisyp i n^p i Ntar-^ i Az\c$mz 

nT^*tOi:-r5o Hf^ftMlJP I N 2 0 4 Si, « 
P I N*m*l<fcLfct>0-efc!K B|^b«JP I N 2 0 

4^fj-3(p&-ett7c©fflgiJP i N©rt§iiJSiJxt*v\ 

[0 0 4 4] PI NWSr-* 1 4 2©£{dc#Jifc LT 
fi, £f\ Xr-y7S 2 0 0fcLT, IEU^AID2 0 
Z*R€t*o #£Xr-y7S2 0 1 tLT, JEL^U 
10 W77^2 0 3*R£t«o Xr>y7S 202fc 
LT, f@giJP I N 1 4 1 i:H£/<*-y 2 0 1 %g£L 
fcr-**, *- Ki?ftr#tf&£L;fcftilP I N 1 0 5 
^Bt^tLTB|^fbffla^?l/\ ffl;j£tl5Bf^££ 
HI^WIJP I N 2 0 4 fcf*o C £T\ 
2 0 1 SfeS^Otfy FTye&t), HSfifcLTS* 
Tfc< 0 $ £Xr<y7S 2 0 2 X^f^Bf^fMat 
LTtt, 00* If 7a -y ?Bf ^7J^SoVfcflI^7;bn 
'jXAT*&£>DE S^fflV^Ct^^^tlSo 

20 [0 0 4 5] UJtOfeS^JRt, SfL < P I NWSr- 
^ 1 4 2*SSt5^ «3P I N 1 0 5*SHt« 
Pf, feitffflS'JP I N 1 4 1 fcSMtSRtKfrfrft*. 
ttlP I N*SltS«^tts SftV^fflP I NTf^di 
LfcP I NWSr-**s ^STfOP I NfSr-^t 

■f»*tifcf«fc^ 0 rait, fflsup iN*«H-rs»& 

(±, Srbv^giJP I Nfr6£$L/cP I Nf3r-^ 

3-s-eop i Ntar-^tttfSi^nff j:v 0 

[0 0 4 6] P I NtSr-*fr5>«jP I N?r 

mtmmm\Mm4ic^to c<Dmmmtt, mi 
30 {c^bfc^si*i oom&tmnmmmi 1 1 

*fflv^di:T*llfiSn5 0 E14t*3^T, P I NtH 
T-9 1 4 2(4, Maibfeidt, A I D 2 0 2 t, SJ 
877^2 0 3 Hf^ftMiJP I N 2 0 4^#f tlS 

[0 0 4 7] ff, 777 7S 3 0 0 fcLTA I D2 0 
2^fx7^U fSSOP I N^ffflfS-ft-tlX/D^ 
7AA^?tlT^§#ffl77^;I/077U7--^3> 
^g'Jr fcHS-TSA^iS^So tL, A I Dff-gtLfc 

wnff*ffia*^iE»7-r5o a i Dj^-a-rsas 

40 If, ^tXr-y 7S 3 0 1 tbX, fflW7y?2 0 3Z 
T^x-yy U W777"2 0 3A^tP I NIM/JS 
(*77^yftSl#^tt*>v>r» fc, MOPING 
fflf§'9--H , x7D^A^T^'5 P I NlMTJ^t^ 
-afSfr*W^So tU P I NggSE£iW'-^L& 
tttl(fMa^^E^7t§o P I NSiE7j5W-at3 
tf^-ti, ^tXr-y7S 3 0 2 t LT, ftfflP I N 1 0 
5^Bt^atLT, I§(ti!!ffi}jl\ tB73?tl?>¥i 
«|JP I N 1 4 1 kffl^^-72 0 1 tlCftMt 

5 0 ftfflp i n i o 5 tLtli, *-KBf#g 

50 1 0 2A\ tg*l 0 0tA*LfctO*ffiffl-r5o 
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[0 0 4 8] 7fy7S3 0 3£LT, StffLfc 

m&w-yz o i tfEUHB^fcsfrESfr&WE?" 

S 0 CCT, 4S*1 OOttH^^-^OEUHl*^ 

lELvMlT&W-tUf, *JHI*^iBR7t5. H£^2 
->2 0 1 tfjEUMSTfctUf, fSgijP I N 1 4 1 *E 

[0049] wc. *£mmc%t>zffl&&*. i o o 

0 2 I C *- F 1 0 1 *ffl<^T, ftJiSFiS* 1 0 0 T 10 
^fflS^T&d ££©7a-0TfeS o llT', C© 
j*8WBltt, 0 l T*L£$iS« 1 0 0£«j»3z£ 

iwfisi i l^ffl^T^Tt^feo^-r^o sfc, 

I CA-Fli, ^-e^O^Al 3 1 
k, P INWa^a^Al 3 2*«|Al/tlV5#, ft 

r3S* i o o a i c a- f i o 1 McfaMZftz^&w. 

So tfc, J*SfS* 1 0 0 I C A- F 1 0 1 tilfft 
S3vyF«APDUffMfflt^Sk©i:LTi^LT 
V^<c 20 
[0 0 5 0] f f , I C il— F 1 0 1 A^4S* 1 0 0 
\m\Ztl%t, 7T>y7S 5 0 0 £:LTI C*-F© 

mmm&fflts* cvrnvit. asfis*i oo# 

1 C A- F 1 0 1 1 U -fey F^2f<*iS{SL, I C 
#-F 1 0 l *»6U*v MSaF*8fif«l:i^fcci: 
tffrftfcns. $r?riS*l OOfi, Xr-y7S5 
0 1 £LTI CA-F 1 0 1 tftffl^nTVS^TOP 

i nw mT—st&mfrtoto c©Biam stwsi 

*1 0 Off, 77-f;l«R3V^F* I CA-Fl 0 1 
fcfgfif? SCfcT, P I NES^n^A 1 3 2*^«tt 30 

?nrv^p i Nwanffl7 7"(';i/%is;f So -^v 

T, $»£l 0 0tfr-£!tBLavyF*P I N« 

i^n^A 1 3 2icmit%ct-u\ p i Nta-f- 
* 1 4 2 ££-ns#ffl-r„ St^^n/cP i N«ar- 
muc^Lmmmmmi 1 4(c^lt^ 

[0 0 5 1] #|C, 7 t 7 7 S 5 0 2 LT, 1£$ 1 0 

0 tt, FFMt 1 0 2 ©JIIR^C <fc <0 , I C *- F 

1 0 1 rtfc|§ffl2ftT^S^-k:77n7''7A 13 1* 
SHR-fSo £©®lTf;£, StMSl0 0i)\ 77 40 
-OVMtK^yYZl CA-F1 0 1 icmtzct 

r\ +>--t£77a^A i 3 i mm^nx^mmi 

n?> F*-T-H77n^A 1 3 1 t^TLTlK d 
kT\ •9--e > 77a^Al 3 1 fcS"3^fc«LS£, P 
I N IS fl^B £ * 5 £ Tfrft -3t^<o 
[0 0 5 2] *-FFM#l 0 2*«±ilP I N 1 
0 5£A7Jf Xt7 7S 5 0 3 feU, *S* 1 0 
0tA;fr2ftfc£aiP I N£fflVT, Jtt I C*-Ffr 
5R#tHLfcP I Ntar-^A^fflSUP I N££*rt 50 
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So £©Mam i c*-Ffr5flfc*tni/fc£T©p 

I NffSr-^tttLT, H4*ffl^T|KBgL/cf@giJP 
I N*tttotSMaWA1"Sf -eUfftSo £CT, 

tbfflgyp i NoafflMa^»tci»i3ofc6, mm 
fflsup i NoamfflaA^Lfee., s*i o ot 

A7JS*ifc£iIP I N*»JP I Ni:»*LT«B©ft 

^Ma*«^tstv^/caffl^fe#x.5tiSo 

Oi^fco^Ki, 7r-y7S 5 0 3 ^LTA-FfM 

f io2ii, «ap i Nfea^tifflsyp i N©^fn^ 

*A7J L/T«tV»^©jlfflSffit ftSo 
[0 0 5 3] ^t, 7r-y7S 5 0 4 £LT, P I NH 

r-y7S 5 0 5 tLT, ftSFS* 1 0 OtiHlfflL/cWJ 

p i n* i c*- f i o i t^ff-TSo d©5aaTa, 

ftSf«*l OOiiP I N^liE3vyF*^-ti , 77n^ 
7 A 1 3 1 fcfgfrf 5 C tT% I C A- F 1 0 1 tfflgiJ 
P I N%3HSU rtffiTMiSUP I N©Hg#£fT4fo-& 
So -ST-tb^y^^y!g|S*lf*5©%5^ Xt7 

7s 5 o 6 k lt, mm* i o oaamLfcfflsijp i 

HJLfc#]l|}c^-9Ts *77-f>P I NlIISSl/Hi:^ 
>7^f>P I NBEsWRTUfeft, 7r-y7S 5 0 7 

lt, ooi±aD©ftSfffla*, i ca-Fi o 

it«p£onvyK5fifft*4ifLT«aLT^<o 
[0 0 5 4] S2©H5SMItO^T^tSo 
*sSW^itff^S I C*-FfeJ:tfRSfS*OS}^ 
ti. It 1 ©IIMM 1 *fflv^T^T^L/ctMk 

ibj$t&So s /c, tmtmmic%t>^> r c*-nt» 

-tt^nslf ffiO«fiE{±, S 1 ©^SS^lTH 2 *ffl^T 
I^L/tlMtP«T$So PINtar-^ 

fre.fflsyp i N*attit5ffla¥«i(±, ^kdmmbm 

TH 4 *ffl^TlHJ! L/c^a^lIt^T$So fe/f L 
*HfiSffmiT1i, iS* 1 0 0 {±, I C *- F 1 0 1 (C« 
£fi£tiTl>SP I N§a7n^7A, SitfllSj©^- 

0ttS o *^Sfi}fSlTtt, I C*-F 1 0 1 1 
fefflStlT^SP I N^a7"a^7A 1 3 2*\ PIN 

wa-r-^fre.fflgijp i N*tttHfs^a*fT^5fe© 
t-rso 

[0 0 5 5] WT, *^»l©^H7?ffito^T^ 
to S1\ 0 6tt, APDUff^©nv>F©lijSEIT 
$S 0 H6tfe^T» APUDJBS©3V>KI4 X 
76 10,^6 1 K ^7^-^l (6 12),;^ 
^-^2 (6 13), L c 6 1 4, 1 5, 

tfL e 6 1 6^5*1^4*15. ^^76 1 0(4, 3Y> 
F *ffl i/^Tiif f S -9"- 1*7 7n ^ A ©l@iJ?Tfe 
So f»M*6 1 ltt, n?>FO^n-FSt„ ^7 
1 (6 12) i:^7^-*2 (6 1 3) ^ 
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6 1 1 izmLtc^yt-zmmmzo l c 6 i 

4 7 F T*£ 5 r- £ 6 1 5 0ft££a 

to 1 5f±I C*-Ft36H-ST~**|ftW 

f«7-f-;I/FTfft«. L e 6 1 6fi I C#-Kfr53£ 

[0 0 5 6] 06t£VT, £^76 1 Ott, 

#ft*M'7'6 2 0, ■b+a'Jf-f^t-Wy6 2 

i , fe<ttfna^ + 6 2 2^p>sj^sn§o 

#1^76 2 (Hi, ^6 1 1 *#£tSfcft©7W 

^6 1 5<D'm^ikgA,mttz>rct6(D^imwz 

ft?£ jfrZo fr*%t 7 w -;!/ F TfeSo Iff -v y* 
;14W6 2 2H, I C#-F£tett£ftT^.57Wv 
AtfSfrtSsvyFfciftStoftTFbXfc^TKBil 
t5fc*fcffl^So tftfcS, l&a^-v>*;l/#^6 2 
2©fil%S&5'S«i:i:-e, I c*- FpWl&©7n 

COO 5 7] fiLhOBaBTtt, A P D U|S©37> F 

fcl^®li!i**ri/TVftfcf, ffiOff^O^vyFTfe 20 

[0 0 5 8] #t, #M?iMb3WS* 1 0 0 
©Ma7n-*!^LT^<o 07{±, *-KBt#Si 

0 2 , I C F 1 0 1 £fflV<T, lOOt' 

1 0 0 I C *- F 1 0 1 t£ftt£nvy F 
ttAPDU»S*fflVStOf:LTRliBLTV<. S 
fe, I C*-Ftt, 9— tf77n7*7Al 3 1 fcP I N 

whto^a 1 3 2*««iLTfet), 1 0 0 

tt, -9— £*7W7A 1 3 1 t%frf§nvyFO§| 30 
S^+^l/S^fcLT, fm37Hy*;bA«\ P 

1 NggTWvA 1 3 ZtfgfrfS^y FOilS^ 
■vy*;l/#^fcLT, HS^+y^M/Bfcffii^T, HHf 

CO 0 5 9] ft, I C A- F l 0 l tfi&ffl&K l 0 0 
tJfASnSt, 7r7 7S 7 0 OfcLT I C#-F© 
Wk^a^fT^^o COMTfi, &gfiS*10 0tf 

I C * - F 1 0 1 1 V -b 7 FSS^ft U I c 

*-F 1 0 1 frB'J-b-y hJSBfcSfl-rSfcirVafeCi: 
tffTftfrftl>o 40 

CO 0 6 0] #t, B$fS*l 0 0(i, 7x*y7S 7 0 

ltLT, *-F3t#S1 0 2©SJ?^FtJ;|3, I CA 
-F 1 0 1 rttf§»JftT^§*-t7^D^7A 1 3 
COMlim SfftiS*10 0A\ 
7 7-f;HfK^vyF^ iig?-*yiM/A£ffli/ v t 1 
ca-Kl 0 lfc^fftScfcT, it-ex7n^A 

1 3 lW2nti^ll7r^MIRt§ 0 90 

i^T, &EFij}*i 0 office 3 

;l/A^fflv^T-9— MT^ufvh 1 3 1 tfgfTLTV< 

<: tT\ -9— ex7p^A 1 3 1 ta^fcfflgfc, 50 
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p i NBtttfjSancftss-effft-aTv^. 

CO 0 6 1 ] CCT, PI NBE%J|fTt«Mt, 
*S*10 0tt* 7-T7 7S 7 0 2 tLT, 7 7l';l/g& 
nvyh*%Wlf-yy*;l/B*ffl^TI C*-Fl 0 1 
fcJSfrU P I NW87W7A 1 3 2«^ftT^ 
S$ffl7r-r;l/^SKtTfe< 0 

[0 0 6 2] ^t, A-FPM#1 0 2*^fflP I 

0 0fcA2rr*i:, 7r7 7S 7 0 3 tL 
T, JfcSriS* 1 0 0 a, ftilP I N£ I c a- F 1 0 1 
fcSSfiU I C#-F 1 0 1 ^F.fflgiJP I N£iI{=LT 

£>5 5o iio^aT-tt, «i o oiit&s^+y* 

;l/B*ffl^T, MOP I NBtffnvyFfc, P I NWa 
■fuVyh 1 3 2 tfgfftSo »JP I N$# 

37>KtliftlP IN, 9— t:'77n^Al 3 it 
tti&tZJ-JVr-i/zymB-k I D, tsktfwm L 

77?1Nmi£tl&t><Dkt*o P I NS37n^A 

1 3 2 ttcnsor-^swi'rs t, n i (ommmm 
^ftfflu a^s*i ootifttSo 

CO 0 6 3] #t, Xr-y 7S 1 0 At LT, R»tS* 
1 0 (Hi, PI NBE**77-f >Tfff43fr*>5>f 

CO 0 6 4] fcU *77^yP I NBE*fT*54 
5, Xf7 7S 7 0 5 tLXs RSWII*1 OOttBlffb 
fcfflS'JP I I C* - F 1 0 1 tJifit^o COfflS 
T?{±, 9liSiB*l 0 0(iP I N^IInT>F^9— ex 
fu^fvh 1 3 1 tf&frtSC tT\ I C*-F 1 0 1 

Coo6 5]-75T, tu ^-yv-o^E^ffftdo 

ft 5, 7r>y 7S 7 0 6 t LT, PS* 1 0 0 ttSStff 

CO 0 6 6] «±IKWLfe#JWtfle-pT, t7y-^yP 
I NfglE^Si/Hity^^yP I N^EA^TLfcft, 
7r-y 7S 7 0 7 t LT, 4S* 1 0 0 ttS U OWl 
I C*-F l 0 l t#Sonvy F%fft§ftifL 

CO 0 6 7] ^t, ^3©^J|^iltO^Tl^t§o 

33J:tfI C*-Ftffi»l?n5lfSO«^{i, S2©* 

tfe^Tfi, I C*-F 1 0 1 tfefflSnTi/^P I N 
fl?87P ^7 A, £ § W±m%L(DV- M 7 7n ^7 L 
it, I C*-F 1 0 1 flSPT?, 5l^cAPDUffMCin 
V7 K*3SSlt5 C fcjbWPfeS to fctSo HO 
J;?ftffiaii, I CA-FfflOt^b-T-O 

^>7rAi:LTftl5nTV^MU L TO S^WtSS 

flloioT*5 rrV^-yayffifgj 
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[0 0 6 8] COrl/y-'>3VSttHco^TH8*ffl 
^Tfflfflt&o H8t*5^T, I C#-F 1 0 1 £14, 
"fu^fyhk 6 5 0 £:> 7WvAB6 5 1 fciflftB* 
nrvs. £f\ B$fiS* l 0 0tf7W?AA 6 5 0 
t»LT, APDUff^avyFA^rTSfc, 7* 
o^7AA6 5 0tt, APDU©S©3v;/FB£7n 
^7iB 6 5 1 tfgfrbT, ffi#,©Ma%7n^AB 
6 5 1 KttfrS-eSo /n^5AB 6 5 Hi, ft 
Ma©|gS^bXt°yX B t LX'futfyhk 6 5 0 
tfito ^bT, I'Xtfi'XBOlS&fcgfc, 7d^*7 10 
A A 6 5 0 t4, jfcjgfiffi* lOOt bXtf^X A fcilfa 

[0 0 6 9] KiML/ciat, ICfc-FlOll*! 
SBOifcSTWvAaV I C*— Kl 0 l*»£nv 
> F£gfrf 3 ^ mhTcu^y KfcStJv^Tffaa 
£&a©-gfl£, I C*-F 1 0 1 rtSPlc*aflfi0^n^ 

[0 0 7 0] *ft»lt*5l^Ttt, ±aLferl/y- 
~>XrAfcbT(4, MULTOS*JBV>ft<Tt>, fb 20 

[0 0 7 1] JKfc, #^»l(C$fc3$)gffi* 100 ■ 

mm7v-mmbr^<o 09(4, *-ffm^i 

0 2*, I C *- F 1 0 1 *ffl^T, BtSfiifi* 10 0T' 

aspB* i o o * i c f i o i icmstz^y f 

(4, -9— yZTrfuVvk 1 3 1 t P I NWS7W7A 

1 3 2*««LT*!), 0 0(4, -9— e - X7° 30 
D^Al 3 l t^Tt^nvyF^af-i-y^^S 
#fcLTlftaf-+V*;UA«fflt\ P I Nf I7o^7 

ai 3 zicmit^^yYtDmm^-^y^ji^tL 
rmm^vyz-jiBZ^-z, mmcwimtiftv to 

[0 0 7 2] S-f , I C *- F 1 0 1 1 0 0 

KJfASflSfc, Xry7*S 8 0 0fcLTI C#-F<D 
MWMf^7o cofligm B$riS*i oo* 

I C *- F 1 0 1 K U -tr-y FSS^ff L, * I C 
*-F 1 0 1 7b^'J-b7 FlSg£§{it" 5£^o/cC£ 40 

[0 0 7 3] ^t, jfc&Sffi*l 0 0(4, XT^fS 8 0 
lfcLT, A-FFMtl 0 2©lS?^tJ:»3, I C* 
-F 1 0 1 flfcM^tlt^?t-t:XyD^7A 1 3 

is}Rt§o £©ffiam sf, i*iWB*ioo 

*, 7 7 ;l/SJR3 ^ > F %1tmi- + A l^T 
I C A- F l 0 l tfgfrrSiltT*, -y--t:X7°n?7 
A l 3 l#te$£tiTl^3Hffl77'f;U£gS?-r5. O 
-3VT, ftffUftn 0 0*, ^©a^F^lia^ 
y^A^ffl^T-9--e77n^-7A 1 3 1 (CfgfjbT 50 
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C tX\ -tr-lfXTW^A 1 3 1 tg^Wc^a 
*, P I NgEA^CSSS-efraoTV^o 

[0 0 7 4] CC?, PI NKiEfcHfTtaKJfc* RSr 
41*10 0(4, Xr-y7S 8 0 2 i:bT, 77-f;HiR 
av>F*ilfty**BitIWI C*-Hl 0 1 
fcfgfTb, P I N§a7u?7A 1 3 2 tftefflSftTi^ 
S*ffl7 7^;^SiRLTfc'< 0 

[0 0 7 5] #-Kj3r#t 1 0 2*±£jg P j N £ 
ft?WB*l OOfcAfrTSfc, 7T77S 8 0 3 tL 
T, RjS4B*l 0 0(4, SIP I N*I C*-K1 0 1 

tiMftb, i c*- f i o i «t*p i ntm*mt> 
-£§ 0 cofflsm $i\ wji 0 0(4, mm- 

+ >*;l/B*Jllvt\ P I Nt&iEavvFfcP i Nta 
7n^7Al 3 2t%fffS 0 £c:T\ PI N^iEnv 
>F(c(4±tiiP I Nfc, tf-fcTXTWvAl 3 lfcft 

js-rs77y7--^3yiigij?A i DWfi^nsfe© 

fc-fSo P I NWSTWvAl 3 2(4^nB© 

BatfcMa^iit^oT, wjp i nzmtZo #t 

p I Nta7n?7A 1 3 2(4, SUHLfcfflSijP I N£ 
*S!flbfcP I N^|H3-eyF^^-H77D^Al 3 

1 KSSfrU ■y--ld , 77n^7A 1 3 1 fcfflB'JP I NO 
Btefcfrfcfe-S, H^isasiwits. ^bT, PIN 
t87a^7A 1 3 2 (4, fig^«S**ft»ilB* lOOt 
jfflT&o ddT*, 7r-y7S 8 0 3©^a(4, MJSb 

[0 0 7 6] W±lH^b/c?)IiC^oT, P I Nf» 
117 Lfti X77 7S 8 0 4 t bT, 1 0 0 (41 
D I CA-F 1 0 1 t#£03-e>F58 

[0 0 7 7] S4 0HfiBB«tOV^Tffilfi-r«o 
Sf, *^SSMIt^fe?» I C*-FfeJ;tfWI*© 
ffijS^H 1 0 t^fo H 1 0 (c^b/clM(4, S 1 

1 t^bfc«J&t|sMf T&S*, P I 

natj^isi i ztmmm^WL\ 9 ota^jtfe 

ofc^t, A-F0f## 1 0 2*±taP I N 1 0 5£fS 

1tb^<Tfe4:^^*a^oT^5o 
[0 0 7 8] CC-P, ^lil^y^gl 9 0(4, A- 
KFJtW#1 0 2©ft^^l^y, JIMt^^tttBtS 
LftAbT, *^SE^ltfe^T(4, * 

- FFJtW# 1 0 2 (4, PI Nfc&fciS* 1 0 0 1 A7JT 

%Rt> D t, g^OJI^^JIIJK^l D 1 9 0 

[0 0 7 9] if.%immW%frZ> I C A- Ffc*& 
IflSnTVSfflffiEOfll^H 1 1 fc^f c H 1 1 t^b 
fc«jS(4, S 1 oiaBgloKWeH 2 (C/7 b/c^jSt 

|W|«T'feS*, P I NWa*ffl7 7^;H 2 2(CP I N 
W8r-^142A, 14 2B, 14 2C*«KWtS^ 
t>5t, A I Dfc«jP I NA^fiStSr-^ 1 4 4 A, 
1 4 4 B, 1 4 4 Ch, MMmi 9 1 fc^ftfflLT^ 
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3j&tfSftoTV>5„ Z.CT\ 1 4 4 A£«j£-f 

3 A I Df4Hffl77^;H 2 1 AtSlSL, MOP IN 
14*^7 r-T/H 2 1 AM&tt£nTV>5-9--l*;*7'n 
^7A1 3 l AfcJ:Dji6ff*n5*7v-OP I NEE 

tfflve.ns 0 rast, 1 4 4B^Mt§A 1 

Di±^7 7-r;H 2 1 BfcftjSU fflB'JP I M±y- 

\Z7>7u?7k \ 3 1 Bic^iomn^n^tyy^y? 

I NIMtfflV^tiSo Sfc, r-# 1 4 4 C£j|]£"f 
5 A I Dtt#ffl7 7-T;H 2 1 CfcftjSU fflSUP I N 

3 1 CfciDSfrSfts*;/? 10 

^>p 1 NiKffl^en«„ tfe, ^kuhbi 9 1 

«, FfM# 1 0 2 O^ic^fSt^'lf IST-fe^c 
CCTf, 4 4 A, 14 4B, 14 4C*^^\ 

n^m-rci:^ mbimi 9 io?s^walsi^ 
cooso]^ *mmmicfab%mm% 1 0 0 

©ffla7D-WJ5bTV^< 0 HI 2J4, *-Fj?ftrg 
1 0 2 tf, I C *- F 1 0 1 fcffl^T, j&jgijSS 1 0 0 
-Pi*8rfflg*fT5B5F07n-0-e&S o Hi 2fc*Lfc 
7n-0J4, 3l2©|«lM0J3?07tc*L/c7n 20 
-fc*ry7 , S 7 0 2ST?H«T***tf, *-KJJr#f 
1 0 214, £31 P I N*fti5WS*l 0 QlzXtitMXh 
Die, ffiiR!Sj*S¥*S* 1 0 0fcRWR6*T^*jSi*'S 

[0 0 81] f&t>%, Xr^7S 1 0 0 OtfefT, 
I C*-Fl 0 1 fcgliLTI C*-Kl 0 lfrS 

#£©«p i n*jhilt&5.5. ccasm $ 
Sf*Hi*i 0 ofi, WJP 1 rw#3v>F£, p 1 NS 30 
S7W5.M 3 2tfgfrf So :cf, fflfflP I Nn 
vyKKtt, mi*lffgfc^-t:-x7n^A 1 3 1 t» 

^t^77'j^r— > 3 yiigij?m«^nT*3^, p 1 

NtaTW^Ai 3 2(4, «JP I NnT>F£§{I 
t^t, littM©!i££fft\ P,8£«i]L/eii£ 
t, mfeLrcTfVr—. ^3 yfSgiJ?£#j£t*raS'JP 
I N £$rMs* 1 0 0 tJifc $Pr»§* 1 0 0 (4, C<D 
(BgiJP I NW^iltT, S2 0HJt«ii4:l«OP 

[0 0 8 2] U±iHUB Lfc«fc 5 t, *HSfi^tfeV^T 40 
(4, Fj?r*r# 1 0 2 tf, I C*-F1 0 l*ffll^T 

■9— V£*«£7r?&g©fc5P I NgfEfc, fl$£$Pr 

a* 1 0 0 taM^^fctfT, nfr-rscfcja^nii 

fcftSo cct, A- FfM# 1 0 2 fijg&fc ftj^iffi* 

1 0 oicmfrmt>&z>Rt>t)ic&mp i n*a*ju i 

CA-F 1 0 1 fcttfc«^£B*tSttfc!>lc#aP 
I N^fEfiSLTfc'f, I C*-F 1 0 1 rtTttaP I N 
©flg£ Lftint, I C * - F e. f@gy P I N * 
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[0 0 8 3] 

BBBoaMU a±i»JiLfcJ:3fc\ *fPilfc4;ftt4\ 

- KfcJB^T&IJ-- If if— tfXSfc 
frftd&gOfcSP I NSIE*, &H©P j N*-Ol 

V%%mi£Kt%CtT\ I C*-FFM#©?iJHtt£ 
[0ffi©ffi#&l£f«] 

m 1 ] *5saos 1 tDms&mc%t>& i c f 
feet tf3*©$$£* b /c h 0 
ra 2] *fgEi©n 1 nmmmi^h^ i c f 

ra 3 ] 1 nwmm\mt>%, ? i ns a 

[a 4 ] *m<D$a 1 (ommm^t>^, ? i ni a 

m 5 ] *^K©S 1 ©£ffi®ffi£*fc5ft»*B*© 
Ma7n-^L/c0 o 

[06] *f§H^©^2©^M^ilt«fe§3vyFO 
[0 7 ] 2 

[08] *iaBOS3O*SI0B»t«fc«7 , D^i 1 

[09] ^m(ow,3<Dmmmmic{^bmmz^<D 

[010] *%HJ!©^" 4 ©|J«£«;bS I C A— 

Fts j: xs m.<om&L* : m l rem, 

[011] mmm; 4 mmmic&b § i c 

Ffc^£n5lPM$^L/i0 o 
[012] *fffl<om 4 ©^*JBlt^^5^«* 
©ffla7n-£^L/c0 o 

[013] I C*-F©77l';W(!j«*SLfcH. 



1 0 0 


ma* 


1 0 1 


I C*-K 


1 0 2 


ts— KBf#g 


1 0 3 




1 0 4 
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1 0 5 
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1 1 2 




1 1 3 
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1 1 4 




1 1 5 




1 1 6 




1 1 7 
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1 1 9 mmm 
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[HI] 



[02] 




[03] 



J5_ 



MF: 

DF: *ffl:>7-0l- 



MF 



DFX 

(AID=AID_X) 



122 ,4<V121A ,J<\/121 B 



132^/n 



pinss 



142B\/\ 



142CV ^ PINga-r-* 



DF A 

(AID = AIO_A) 



am pin 



DFB 

(AID = AID_B) 




*-ex 



31 B 



V 141A 



M41B 



121C 



DFC 

(AID = AID q 




«131C 



^141 ^01 



S200 




I I M» 



^201 ^ 



202 



105 



202 ^ AID | MEt797 | B^fcBSIPIN \ -^- 



142 



[04] 



PIN SfSx-* 



ftHPIN 




3 ^ 

141 201 



[06] [08] 
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[05] 



'101 



IC*-K 



pin <gm 

"7" 



132 



—r 



131 



7 



i|PIN 



100 



as*** 



pin <em^uf=}u 



T 



l_W 









fta pin 



102 ' 



«a pin 
pinsst— 
<asu pin sa^-ra 



S500 



S501 



S502 



S503 



S504 
PlN»iiE3 7^K 




fi»JPIN^iC*-K* 



S505 



I 



•506 



ffl»J PIN 



S507 
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#F»1 2 0 0 3 - 1 2 3 0 3 2 



[07] 



'101 



ica-K 



pin 



PIN 

%7C 



=F1 

132 131 



.100 



IC*-KjfA». 

ic*-h*£«i»nb 



ata?-^*^ a * 
HUT. if— Ifx^a 



n*t. pin 




e»IPIN 



Mifif^** B & 

ffli^r> *a pin * 
mm pin *ss3-r 



S700 



S701 



S702 



S703 




S705 



ffl^re»j pin £ 

IC *-K(c&«-f £ 



,-S706 



sit 











a* 


^\ £ 707 
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'101 



ICA-K 



PIN ' 



PIN 

9.7Z 



132 131 



102 



rj 



PIN affcaWK 



100 



IC*-K»A», 
lca-F*tB8Ht 
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CLAIMS 

[Claim(s)] 

[Claim 1]A service program to process service which needs a cardholder's justification check 
One or more pieces, An individual password used in order to perform said cardholder's 
justification check One or more pieces, A password inputting means as which it is an IC card 
terminal using an IC card one or more encryption passwords which enciphered said individual 
password were remembered to be, and said cardholder can input the 1st password, A card 
write means which communicates with said IC card, and said encryption password are read 
from said IC card by said card write means, Decrypt by said 1st password and it has an 
arithmetic processing means which transmits the 2nd password that generated and generated 
the 2nd password to said IC card by said card write means, An IC card terminal characterized 
by carrying out normal execution of said service when said 2nd password is in agreement with 
said individual password inside said IC card. 

[Claim 2]Establish an information accumulation means which accumulates information 
acquired from said IC card, and said encryption password is read from said IC card by said 
card write means, The IC card terminal according to claim 1 reading said encryption password 
which was accumulated in this information accumulation means and accumulated in this 
information accumulation means, and decoding by the 1st password. 
[Claim 3]Said encryption password enciphers using said 1st password, and what combined 
fixed value data which consists of as specific a value as said individual password said 
arithmetic processing means, If said fixed value data corrects to data which decrypted said 
encryption password using said 1st password and ** is contained in it, said said 2nd password 
produced by decrypting, The IC card terminal according to claim 1 or 2 judging that it is equal 
to said individual password. 

[Claim 4]A service program to process service which needs a cardholder's justification check 
One or more pieces, An IC card one or more encryption passwords which enciphered an 
individual password used in order to perform said cardholder's justification check were 
remembered to be is used, A password inputting means as which it is an IC card terminal 
which communicates with a center apparatus which is keeping said individual password, and 
said cardholder can input the 1st password, A card write means which communicates with said 
IC card, and a means of communication which communicates with said center apparatus via a 
network, Said encryption password read from said IC card by said card write means is 
decrypted by said 1st password, An IC card terminal characterized by carrying out normal 
execution of said service when the 2nd password is generated, it has an arithmetic processing 
means which transmits said 2nd password to said center apparatus by said means of 
communication and said 2nd password is in agreement with said individual password with said 
center apparatus. 
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[Claim 5]Establish an information accumulation means which accumulates information 
acquired from said IC card, and said encryption password is read from said IC card by said 
card write means, The IC card terminal according to claim 4 reading said encryption password 
which was accumulated in this information accumulation means and accumulated in this 
information accumulation means, and decoding by the 1st password. 
[Claim 6]Said encryption password enciphers using said 1st password, and what combined 
fixed value data which consists of as specific a value as said individual password said 
arithmetic processing means, The IC card terminal according to claim 5 which will be 
characterized by judging that said said 2nd password produced by decrypting is equal to said 
individual password if said fixed value data corrects to data which decrypted said encryption 
password using said 1st password and ** is contained in it. 

[Claim 7]A service program to process service which needs a cardholder's justification check 
One or more pieces, An individual password used in order to perform said cardholder's 
justification check One or more pieces, An IC card one or more encryption passwords which 
enciphered said individual password were remembered to be, the person himself/herself in a 
system which consists of an IC card terminal which provides said service for said cardholder 
using said IC card - it being an authentication method and, A processing step to which said IC 
card terminal reads said encryption password from said IC card, A processing step which 
accumulates said encryption password which said IC card terminal read from said IC card, A 
processing step as which said card holder inputs the 1st password into said IC card terminal, A 
processing step which decrypts said encryption password which said IC card terminal is 
accumulating by said 1st password, and generates the 2nd password, the person 
himself/herself by whom a processing step which carries out normal execution of said service 
being included when said IC card terminal transmits said 2nd password to said IC card and 
said 2nd password is in agreement with said individual password inside said IC card -- an 
authentication method. 

[Claim 8]A service program to process service characterized by comprising the following which 
needs a cardholder's justification check One or more pieces, An IC card one or more 
encryption passwords which enciphered an individual password used in order to perform said 
cardholder's justification check were remembered to be, the person himself/herself in a system 
which consists of a center apparatus which is connected with an IC card terminal which 
provides said service for said cardholder using said IC card, and said IC card terminal via a 
network, and is keeping said individual password - an authentication method. 
A processing step to which said IC card terminal reads said encryption password from said IC 
card. 

A processing step which accumulates said encryption password which said IC card terminal 
read from said IC card. 
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A processing step as which said card holder inputs the 1st password into said IC card terminal. 
A processing step which decrypts said encryption password which said IC card terminal is 
accumulating by said 1st password, and generates the 2nd password, A processing step which 
carries out normal execution of said service when said IC card terminal transmits said 2nd 
password to said center apparatus and said 2nd password is in agreement with said individual 
password with said center apparatus. 

[Claim 9]A service program to process service which needs a cardholder's justification check 
One or more pieces, An individual password used in order to perform said cardholder's 
justification check One or more pieces, An IC card a password control program in which an 
encryption password which enciphered said individual password manages one or more pieces 
and said encryption password was remembered to be, the person himself/herself in a system 
which consists of an IC card terminal which provides said service for said cardholder using 
said IC card - with a processing step as which it is an authentication method and said 
cardholder inputs the 1st password into said IC card terminal. A processing step at which said 
IC card terminal transmits said 1st password to said IC card, Said password control program 
executed within said IC card decrypts said encryption password by said 1st password, and 
generates the 2nd password, A processing step which transmits to said IC card terminal, and 
said IC card terminal transmit said 2nd password to said IC card, the person himself/herself by 
whom a processing step which carries out normal execution of said service being included 
when said 2nd password is in agreement with said individual password inside said IC card - 
an authentication method. 

[Claim 10]A service program to process service which needs a cardholder's justification check 
One or more pieces, An individual password used in order to perform said cardholder's 
justification check One or more pieces, An IC card a password control program in which an 
encryption password which enciphered said individual password manages one or more pieces 
and said encryption password was remembered to be, the person himself/herself in a system 
which consists of an IC card terminal which provides said service for said cardholder using 
said IC card - with a processing step as which it is an authentication method and said card 
holder inputs the 1st password into said IC card terminal. A processing step at which said IC 
card terminal transmits said 1st password to said IC card, A processing step which said 
password control program executed within said IC card decrypts said encryption password by 
said 1st password, and generates the 2nd password, the person himself/herself by whom a 
processing step which carries out normal execution of said service being included when said 
password program transmits the 2nd password to said service program and said 2nd 
password is in agreement with said individual password - an authentication method. 
[Claim 1 1]A service program to process service characterized by comprising the following 



http://www4.ipdl.inpit.go.jp/cgi-bi^ 6/2/2011 



JP,2003-123032,A [CLAIMS] 



Page 4 of 4 



which needs a cardholder's justification check One or more pieces, An IC card terminal which 
provides said service for said cardholder using an IC card the 1st password that protects that 
an individual password used in order to perform said cardholder's justification check outputs 
one or more pieces and said individual password outside was remembered to be. 
A password inputting means as which said cardholder can input the 2nd password. 
A card write means which communicates with said IC card. 

Transmit to said IC card by said IC card write means, and said 2nd password inside said IC 
card, When said 2nd password is in agreement with said 1st password, acquire said individual 
password by said IC card write means, and said individual password is transmitted to said IC 
card by said card write means, An arithmetic processing means which carries out normal 
execution of said service when collation of said individual password inside said IC card is 
successful. 

[Claim 12]A service program to process service characterized by comprising the following 
which needs a cardholder's justification check One or more pieces, An individual password 
used in order to perform said cardholder's justification check One or more pieces, An IC card 
terminal which provides said service for said cardholder using an IC card the 1st biological 
information that protects outputting said individual password outside, and a control program 
which manages biological information were remembered to be. 

A biological information reading means which can read the 2nd biological information in said 
cardholder. 

A card write means which communicates with said IC card. 

Transmit said 2nd biological information to said IC card by said IC card write means, and 
inside said IC card, When said 2nd biological information is in agreement with said 1st 
biological information, acquire said individual password by said IC card write means, and said 
individual password is transmitted to said IC card by said card write means, An arithmetic 
processing means which carries out normal execution of said service when collation of said 
individual password inside said IC card is successful. 

[Claim 13]The IC card terminal according to claim 12, wherein a fingerprint is used for said 1st 
biological information and said 2nd biological information. 
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[Detailed Description of the Invention] 
[0001] 

[Field of the lnvention]an IC card is used for this invention ~ the person himself/herself - it is 
related with the IC card terminal equipment and the person-himself/herself authentication 
method which attest. 
[0002] 

[Description of the Prior Art]ln recent years, an IC card is spreading widely instead of a 
magnetic card. This is because there is the feature provided with the arithmetic unit 
(microprocessor) for performing cipher processing with a large storage capacity, etc. which is 
not in a magnetic card that an inside can be observed easily and nothing is (it has the Tampa- 
proof nature) in an IC card. By applying an IC card with such a feature to a settlement system, 
an identification system, etc., security can be raised compared with a magnetic card, or the 
new service which was not able to be realized in a magnetic card can be provided. For 
example, there are electronic money and a credit card as service which a settlement system 
provides, and an employee ID card, a driver's license, etc. are raised as service which an 
identification system provides. 

[0003]The IC card is classified into the contact type and the noncontact type according to the 

communication method. 

Each specification is already standardized. 

For example, a contact smart card is ISO (International Organization for Standardization: 
International Organization for Standardization), and is standardized as ISO/IEC7816. The IC 
card based on ISO/IEC7816 calculates inside according to the command which transmits from 
a terminal, is performing returning a result as a response one by one, and carries out 
processing for realizing service. 

[0004]Here, the command and response which are transmitted and received between IC card 
terminals are specified in the form of APDU (Application Protocol Data Unit) ISO/IEC7816. The 
IC card based on ISO/IEC7816 is stored in the file in which a program and data had a layered 
structure as shown in drawing 13 . 

[0005]ln drawing 13 , the main file (MF) 900 is a file of a top layer, and exists only one in an IC 
card, and two or more dedicated file (DF)901A, and 901 B and 901 C exist in the bottom of it. 
Data (it is called service information below) required for the program (it is called the service 
program below) and service execution for performing specific service is stored in a dedicated 
file. Since two or more existence is possible for a dedicated file in an IC card, two or more 
services can be used by the IC card of one sheet by storing two or more service programs and 
service information in a different dedicated file. 
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[0006]ln order to execute a specific service program, a terminal chooses first the dedicated file 
in which the specific service program is stored as a file of KARENTO using the "file selection 
command" specified as a command of APDU form. Thereby, the command which an IC card 
receives from a terminal after it comes to be processed according to the selected service 
program. Here, each dedicated file is identifiable from the outside by ID called an application 
identifier (it omits the following AID). For example, the "file selection command" can choose a 
specific dedicated file by specifying AID. 

[0007]now, the case where service is received using an IC card - a cardholder ~ the 
attestation which it may be urged to attest that the person himself/herself is using that card, for 
this reason it performs - the person himself/herself - it is called attestation. The PIN 
attestation as which a cardholder inputs the password called PIN into a terminal as a method 
for realizing person-himself/herself attestation is common. PIN attestation includes "off-line PIN 
attestation" compared with PIN which has memorized PIN which the cardholder inputted in an 
IC card, and "on-line PIN attestation" compared with PIN in which the center holds PIN which 
the cardholder inputted via a network, the persons themselves himself/herself, such as PIN 
attestation, - attesting is important in order to prevent the illegal use of an IC card. 
[0008] 

[Problem to be solved by the invention]As explained above, can use various services by the IC 
card of one sheet by using an IC card, but. On the other hand, in order to use each service, 
when performing PIN attestation, the cardholder keeps different PIN for every service in mind, 
and may have to use PIN properly for every service to be used. This becomes a factor which 
spoils a card user's convenience greatly. 

[0009]Then, when this invention receives each service using an IC card corresponding to two 
or more services in an IC card owner, an IC card terminal which can improve an IC card 
owner's convenience by carrying out PIN attestation which needs to be performed for every 
service to composition which can be performed only by keeping one common PIN in mind, and 
the person himself/herself - it aims at providing an authentication method. 
[0010] 

[Means for solving problemjln this invention, a service program to process service which needs 
a cardholder's justification check To achieve the above objects, one or more pieces, An 
individual password used in order to perform said cardholder's justification check One or more 
pieces, A password inputting means as which said cardholder can input the 1st password in an 
IC card terminal using an IC card one or more encryption passwords which enciphered said 
individual password were remembered to be, A card write means which communicates with 
said IC card, and an information accumulation means which accumulates information acquired 
from said IC card, Said encryption password is read from said IC card by said card write 
means, Said encryption password which was accumulated in said information accumulation 
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means and accumulated in said information accumulation means is read, Decrypt by said 1st 
password, generate the 2nd password, and said 2nd password is transmitted to said IC card 
by said card write means, When said 2nd password is in agreement with said individual 
password inside said IC card, it has an arithmetic processing means which carries out normal 
execution of said service. 

[001 1]ln this invention, the service program to process the service which needs a cardholder's 
justification check One or more pieces, The individual password used in order to perform said 
cardholder's justification check One or more pieces, The IC card one or more encryption 
passwords which enciphered said individual password were remembered to be, the person 
himself/herself in the system which consists of an IC card terminal which provides said service 
for said cardholder using said IC card - an authentication method with the processing step to 
which said IC card terminal reads said encryption password from said IC card. The processing 
step which accumulates said encryption password which said IC card terminal read from said 
IC card, The processing step as which said card holder inputs the 1st password into said IC 
card terminal, The processing step which decrypts said encryption password which said IC 
card terminal is accumulating by said 1st password, and generates the 2nd password, When 
said IC card terminal transmits said 2nd password to said IC card and said 2nd password is in 
agreement with said individual password inside said IC card, the processing step which carries 
out normal execution of said service is included. 

[0012]Namely, in order to solve an aforementioned problem, this invention, The service 
program to process the service which needs a cardholder's justification check One or more 
pieces, The individual password used in order to perform said cardholder's justification check 
One or more pieces, The password inputting means as which said cardholder can input the 1st 
password in the IC card terminal using the IC card one or more encryption passwords which 
enciphered said individual password were remembered to be, The card write means which 
communicates with said IC card, and said encryption password are read from said IC card by 
said card write means, Decrypt by said 1st password and it has an arithmetic processing 
means which transmits the 2nd password that generated and generated the 2nd password to 
said IC card by said card write means, When said 2nd password was in agreement with said 
individual password inside said IC card, it was made to carry out normal execution of said 
service. 

[0013]This invention establishes an information accumulation means which accumulates 
information acquired from said IC card in the above-mentioned IC card terminal, and reads 
said encryption password from said IC card by said card write means, Said encryption 
password which was accumulated in this information accumulation means and accumulated in 
this information accumulation means is read, and it was made to decode by the 1st password. 
[0014]ln the above-mentioned IC card terminal, this invention said encryption password, 
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Encipher using said 1st password and what combined said individual password and fixed value 
data which consists of a specific value said arithmetic processing means, When said fixed 
value data corrected to data which decrypted said encryption password using said 1st 
password and ** was contained in it, we decided to judge that said said 2nd password 
produced by decrypting is equal to said individual password. 

[0015]ln order to solve an aforementioned problem, a service program which processes 
service which needs a cardholder's justification check this invention One or more pieces, An IC 
card one or more encryption passwords which enciphered an individual password used in 
order to perform said cardholder's justification check were remembered to be is used, A 
password inputting means as which said cardholder can input the 1st password in an IC card 
terminal which communicates with a center apparatus which is keeping said individual 
password, A card write means which communicates with said IC card, and a means of 
communication which communicates with said center apparatus via a network, Said encryption 
password read from said IC card by said card write means is decrypted by said 1st password, 
When the 2nd password was generated, it had an arithmetic processing means which 
transmits said 2nd password to said center apparatus by said means of communication and 
said 2nd password was in agreement with said individual password with said center apparatus, 
we decided to carry out normal execution of said service. 

[0016]This invention establishes an information accumulation means which accumulates 
information acquired from said IC card in the above-mentioned IC card terminal, and reads 
said encryption password from said IC card by said card write means, Said encryption 
password which was accumulated in this information accumulation means and accumulated in 
this information accumulation means is read, and it was made to decode by the 1st password. 
[0017]ln the above-mentioned IC card terminal, this invention said encryption password, 
Encipher using said 1st password and what combined said individual password and fixed value 
data which consists of a specific value said arithmetic processing means, When said fixed 
value data corrected to data which decrypted said encryption password using said 1st 
password and ** was contained in it, we decided to judge that said said 2nd password 
produced by decrypting is equal to said individual password. 

[0018]ln order to solve an aforementioned problem, a service program which processes 
service which needs a cardholder's justification check this invention One or more pieces, An 
individual password used in order to perform said cardholder's justification check One or more 
pieces, An IC card one or more encryption passwords which enciphered said individual 
password were remembered to be, the person himself/herself in a system which consists of an 
IC card terminal which provides said service for said cardholder using said IC card - an 
authentication method with a processing step to which said IC card terminal reads said 
encryption password from said IC card. A processing step which accumulates said encryption 
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password which said IC card terminal read from said IC card, A processing step as which said 
card holder inputs the 1st password into said IC card terminal, A processing step which 
decrypts said encryption password which said IC card terminal is accumulating by said 1st 
password, and generates the 2nd password, When said IC card terminal transmitted said 2nd 
password to said IC card and said 2nd password was in agreement with said individual 
password inside said IC card, it was made for a processing step which carries out normal 
execution of said service to be included. 

[0019]ln order to solve an aforementioned problem, the service program which processes the 
service which needs a cardholder's justification check this invention One or more pieces, The 
IC card one or more encryption passwords which enciphered the individual password used in 
order to perform said cardholder's justification check were remembered to be, The IC card 
terminal which provides said service for said cardholder using said IC card, the person 
himself/herself in the system which consists of a center apparatus which is connected with said 
IC card terminal via the network, and is keeping said individual password - an authentication 
method, The processing step to which said IC card terminal reads said encryption password 
from said IC card, The processing step which accumulates said encryption password which 
said IC card terminal read from said IC card, The processing step as which said card holder 
inputs the 1st password into said IC card terminal, The processing step which decrypts said 
encryption password which said IC card terminal is accumulating by said 1st password, and 
generates the 2nd password, When said IC card terminal transmits said 2nd password to said 
center apparatus and said 2nd password is in agreement with said individual password with 
said center apparatus, It was made for the processing step which carries out normal execution 
of said service to be included. 

[0020]ln order to solve an aforementioned problem, the service program which processes the 
service which needs a cardholder's justification check this invention One or more pieces, The 
individual password used in order to perform said cardholder's justification check One or more 
pieces, The IC card the password control program in which the encryption password which 
enciphered said individual password manages one or more pieces and said encryption 
password was remembered to be, the person himself/herself in the system which consists of 
an IC card terminal which provides said service for said cardholder using said IC card - an 
authentication method with the processing step as which said cardholder inputs the 1st 
password into said IC card terminal. The processing step at which said IC card terminal 
transmits said 1st password to said IC card, Said password control program executed within 
said IC card decrypts said encryption password by said 1st password, and generates the 2nd 
password, It was made for the processing step which transmits to said IC card terminal, and 
the processing step which carries out normal execution of said service when said IC card 
terminal transmits said 2nd password to said IC card and said 2nd password is in agreement 
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with said individual password inside said IC card to be included. 

[0021]ln order to solve an aforementioned problem, the service program which processes the 
service which needs a cardholder's justification check this invention One or more pieces, The 
individual password used in order to perform said cardholder's justification check One or more 
pieces, The IC card the password control program in which the encryption password which 
enciphered said individual password manages one or more pieces and said encryption 
password was remembered to be, the person himself/herself in the system which consists of 
an IC card terminal which provides said service for said cardholder using said IC card ~ an 
authentication method with the processing step as which said card holder inputs the 1st 
password into said IC card terminal. The processing step at which said IC card terminal 
transmits said 1st password to said IC card, The processing step which said password control 
program executed within said IC card decrypts said encryption password by said 1st 
password, and generates the 2nd password, When said password program transmitted the 
2nd password to said service program and said 2nd password was in agreement with said 
individual password, it was made for the processing step which carries out normal execution of 
said service to be included. 

[0022]This invention is provided with the following in order to solve an aforementioned 
problem. 

A service program which processes service which needs a cardholder's justification check is 
one or more pieces. 

An individual password used in order to perform said cardholder's justification check is one or 
more pieces. 

A password inputting means as which said cardholder can input the 2nd password in an IC 
card terminal which provides for said cardholder the **** aforementioned service for IC cards 
the 1st password that protects outputting said individual password outside was remembered to 
be. 

Transmit to said IC card by said IC card write means, and a card write means which 
communicates with said IC card, and said 2nd password inside said IC card, When said 2nd 
password is in agreement with said 1st password, acquire said individual password by said IC 
card write means, and said individual password is transmitted to said IC card by said card write 
means, An arithmetic processing means which carries out normal execution of said service 
when collation of said individual password inside said IC card is successful. 

[0023]This invention is provided with the following in order to solve an aforementioned 
problem. 

A service program which processes service which needs a cardholder's justification check is 
one or more pieces. 
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An individual password used in order to perform said cardholder's justification check is one or 
more pieces. 

The 1st biological information that protects outputting said individual password outside. 
A biological information reading means in which an IC card terminal which provides said 
service for said cardholder using an IC card a control program which manages biological 
information was remembered to be can read the 2nd biological information in said cardholder, 
Transmit a card write means which communicates with said IC card, and said 2nd biological 
information to said IC card by said IC card write means, and inside said IC card, When said 
2nd biological information is in agreement with said 1st biological information, acquire said 
individual password by said IC card write means, and said individual password is transmitted 
to said IC card by said card write means, An arithmetic processing means which carries out 
normal execution of said service when collation of said individual password inside said IC card 
is successful. 

[0024]ln the above-mentioned IC card terminal, the fingerprint was used for this invention as 

said 1st biological information and said 2nd biological information. 

[0025] 

[Mode for carrying out the invention]Hereafter, the embodiment of this invention is described. 
Although following embodiments explain the case where the IC card of a contact type is used, 
it is not an item required for this invention that it is a contact type, for example, this invention is 
here, applicable even if it is a noncontact IC card. In following embodiments, although the 
command transmitted and received between a terminal and an IC card assumes the command 
of APDU form, If it is a command set which it is not an item required for this invention to use 
the command of APDU form, and can realize a function equivalent to APDU form, this 
invention is applicable no matter what thing it may use. not the item in which it is required for 
this invention to be such a terminal although the terminal with the function to perform the 
settlement of accounts for electronic money or a credit card as a terminal is assumed in 
following embodiments but the person himself/herself - this invention is applicable if it is a 
terminal which attests. 

[0026]First, a 1st embodiment is described, drawing 1 -- the person himself/herself - the 
composition of the IC card and terminal concerning this embodiment which attests is shown, in 
drawing 1 -- the person himself/herself - attestation is performed between the settlement 
system 100, IC card 101, the cardholder 102, the salesclerk 103, and the network 104. The 
composition shown in drawing 1 assumes that the cardholder 102 performs the settlement of 
accounts by electronic money or a credit card using IC card 101. Therefore, the settlement 
system 100 is a terminal provided with the clearing function by an IC card, for example, 
assumes ATM of a credit terminal or a financial institution. IC card 101 has the composition 
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that service of plurality, such as electronic money and a credit card, can be provided, the 
cardholder 102 - the person himself/herself-- suppose that common PIN105 which can be 
used in common with two or more services which are PIN used for attestation and IC card 101 
provides is memorized. 

[0027]Next, the internal configuration of the settlement system 100 is explained. The 
settlement system 100 has the card write means 110, the arithmetic processing means 111, 
the display device 112, the PIN input means 113, the information accumulation means 114, the 
control means 115, and the means of communication 116. 

[0028]The card write means 1 10 has the function to transmit a command to IC card 101 
(writing), or to receive a response from an IC card (reading), in order to communicate with IC 
card 101. 

[0029]The arithmetic processing means 1 1 1 comprises a microprocessor and a program 
storing memory, for example, controls the settlement system 100 whole based on the program 
stored in the program storing memory, and has a function which carries out settling 
processing. 

[0030]The displaying means 112 displays the variety of information of a settlement amount etc. 
as opposed to the cardholder 102. 

[0031]the PIN input means 113- the cardholder 102 -- the person himself/herself - it has a 
function in which PIN for attestation can be inputted, for example using a ten key etc. 
[0032]The information accumulation means 114 has a function which accumulates temporarily 
or permanently the information acquired from IC card 101 or the network 104, or the 
information which the cardholder 102 and the salesclerk 103 inputted, for example, comprises 
a hard disk, semiconductor memory, etc. 

[0033]The control means 115 provides Interface Division for the salesclerk 103 to operate the 
settlement system 100, for example, comprises a keyboard, a bar code reader, a display, etc. 
[0034]The means of communication 116 is used in order to have a function which 
communicates with a center via the network 104, for example, to perform on-line PIN 
attestation. Here, in the case of unmanned terminals, such as financial institution ATM, the 
control means 115 may not be, and, in the salesclerk 103, the settlement system 100 does not 
need to exist. When the settling processing by the settlement system 100 is completed off-line, 
there may not be the means of communication 116. 

[0035]Next, the internal configuration of IC card 101 is explained. IC card 101 has the means 
of communication 117, the information accumulation means 118, and the arithmetic processing 
means 119. 

[0036]The means of communication 117 communicates with the card write means 110 of the 
settlement system 100, and has the function to receive a command from the settlement system 
100, or to reply a response to the settlement system 100. 
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[0037]The program and data in which the information accumulation means 118 performs 
service which an IC card provides, Or it has the function to store the information etc. which 
were acquired from the settlement system 100 temporarily or permanently, for example, 
comprises semiconductor memory, such as ROM (Read Only Memory), RAM (Random 
Access Memory), and a flash memory. 

[0038]The arithmetic processing means 119 is using a microprocessor, manages control of the 
whole IC card and has the function to execute the program stored in the information 
accumulation means 118. 

[0039]Next, the composition of the information stored in IC card 101 concerning this 
embodiment is shown in drawing 2 . Drawing 2 is the file organization of information 
accumulation means 118 inside which constitutes IC card 101, and comprises the main file 
(MF) 120, dedicated file (DF)121A, 121 B and 121C, and the PIN management dedicated file 
122. These files have a layered structure and have the composition that the main file 120 is 
located in the top and the dedicated files 121A, 121B, and 121C and the PIN management 
dedicated file 122 are located in the lower layer. Different AID is assigned to each dedicated 
file and it is identifiable from the outside. 

[0040]Next, an internal configuration of the dedicated files 121A, 121 B, and 121C is explained, 
in the service program 131 A which performs specific account settlement services in the 
dedicated file 121 A, and these account settlement services -- the person himself/herself - 
individual PIN141A which is data required in order to perform attestation by off-line PIN 
attestation is stored. The service program 131 B and individual PIN141B are similarly stored in 
the dedicated file 121 B. account settlement services which the service program 131C is stored 
in the dedicated file 121C, and are performed by the service program 131C -- the person 
himself/herself - on-line PIN attestation shall be performed as attestation Therefore, PIN data 
is not stored in the dedicated file 121C. 

[0041]Next, the PIN management dedicated file 122 is explained. The PIN management 
dedicated file 122 is a dedicated file for PIN management. The PIN control program 132 which 
manages individual PIN individually used for the PIN management dedicated file 122 with the 
service programs 131A, 131B, and 131C, The PIN management data 142A, 142B, and 142C 
which is data which the PIN control program 132 manages is stored. Data which needs the 
PIN management data 142Afor off-line PIN attestation performed by the service program 
131 A here is contained. Similarly, data which needs the PIN management data 142B for off- 
line PIN attestation performed by the service program 131 B is contained. Data which needs 
the PIN management data 142C for on-line PIN attestation performed by the service program 
131C is contained. 

[0042]Although three service programs are contained in the information accumulation means 
118 and an PIN control program has composition of having managed three PIN management 
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data, in this explanation, this invention is applicable also to an IC card in which arbitrary 
numbers of service programs are contained. For example, when IC card 101 contains four 
service programs, the PIN control program should just manage four PIN management data. 
This invention is applicable even if it is the composition of performing off-line PIN attestation 
even if a service program in IC card 101 is the composition of performing on-line PIN 
attestation. 

[0043]Next, composition and the directions for PIN management data which the PIN control 
program 132 concerning this embodiment has managed are explained. First, composition and 
a generation procedure of PIN management data are shown in drawing 3 . In drawing 3 , the 
PIN management data 142 has AID202, the control flag 203, and composition that encryption 
individual PIN204 is contained. AID202 is an application identifier of a dedicated file in which a 
service program with which the PIN management data 142 corresponds is stored. The control 
flag 203 shows an PIN authentic method (on-line or off-line) with which the PIN management 
data 142 corresponds. For example, 1 bit shall be assigned to the control flag 203 and, in the 
case of individual PIN for on-line in a case of "0", and "1", individual PIN for off-line shall be 
held at the PIN management data 142. Encryption individual PIN204 enciphers individual PIN 
and the contents of original individual PIN cannot be guessed only from encryption individual 
PIN204. 

[0044]As a generation procedure of the PIN management data 142, right AID202 is first set up 
as Step S200. Next, the right control flag 203 is set up as Step S201. Next, encryption 
processing is performed by using as an encryption key common PIN105 to which the 
cardholder set the data which combined individual PIN 141 and the fixed pattern 201 as Step 
S202, and the cryptogram outputted is set to encryption individual PIN204. Here, the fixed 
pattern 201 is a certain specific bit string, and is defined as a fixed value. It is possible to use 
DES which is a cryptographic algorithm based on a block cipher system, for example as 
encryption processing performed at Step S202. Or other encryption algorithms may be used. 
[0045]The above generation procedure is performed, when registering the PIN management 
data 142 newly and changing common PIN105, and when changing individual PIN141. What is 
necessary is just to replace with old PIN management data the PIN management data 
generated by new common PIN, when changing common PIN. What is necessary is similarly, 
just to replace with old PIN management data the PIN management data generated from new 
individual PIN, when changing individual PIN. 

[0046]Next, the procedure which extracts individual PIN from PIN management data is shown 
in drawing 4 . This procedure is performed by using the arithmetic processing means 1 1 1 which 
constitutes the settlement system 100 shown in drawing 1 . In drawing 4 , the PIN management 
data 142 has AID202, the control flag 203, and the composition that encryption individual 
PIN204 is contained, as mentioned above. 



htip://www4.ipdl.inpit.g^ 6/2/2011 



JP,2003-123032,A [DETAILED DESCRIPTION] 



Page 11 of 17 



[0047]First, it is investigated whether it is in agreement with the application identifier of the 
dedicated file in which the service program which checks AID202 and uses individual PIN as 
Step S300 is stored. If AID is not in agreement, the end of this processing of unjust is carried 
out. If AID is in agreement, next, as Step S301, the control flag 203 will be checked and it will 
be investigated whether the control flag 203, the shown PIN authentic method (off-line or on- 
line), and the PIN authentic method which the service program which uses individual PIN holds 
are in agreement. If an PIN authentic method is not in agreement, the end of the processing of 
unjust is carried out. When an PIN authentic method is in agreement, next, as Step S302, by 
using common PIN105 as an encryption key, decoding processing is performed and the 
plaintext outputted is divided into individual PIN141 and the fixed pattern 201. Here, as 
common PIN 105, the cardholder 102 uses what was inputted into the terminal 100. 
[0048]Next, it is verified whether the acquired fixed pattern 201 is a right value as Step S303. 
Here, the terminal 100 presupposes that the right value of a fixed pattern is known beforehand. 
If the fixed pattern 201 is not a right value, the end of this processing of unjust will be carried 
out. If the fixed pattern 201 is a right value, it will consider that individual PIN 141 has been 
acquired correctly and normal termination of this processing will be carried out. 
[0049]Next, the process flow of the settlement system 100 concerning this embodiment is 
explained. Drawing 5 is a flow chart in case the cardholder 102 performs settling processing 
with the settlement system 100 using IC card 101. Here, this settling processing shall be 
performed using the arithmetic processing means 111 which constitutes the settlement system 
100 shown by drawing 1 . In this example, although the IC card stores the service program 131 
and the PIN control program 132, the settlement system 100 shall not communicate 
simultaneously with two or more programs stored in IC card 101. The command which the 
settlement system 100 transmits to IC card 101 is explained as what uses APDU form. 
[0050]First, if IC card 101 is inserted in the settlement system 100, initialization processing of 
an IC card will be performed as Step S500. In this processing, the settlement system 100 
transmits a reset request to IC card 101, and receiving a reset response from IC card 101 after 
that is performed. Next, the settlement system 100 reads all the PIN management data stored 
in IC card 101 as Step S501 . In this processing, the settlement system 100 chooses first the 
PIN management dedicated file in which the PIN control program 132 is stored by publishing a 
file selection command to IC card 101. The PIN management data 142 is altogether read 
because continue and the settlement system 100 publishes a data readout command to the 
PIN control program 132. The read PIN management data is stored in the information 
accumulation means 114 shown in drawing 1 . 

[0051]Next, the terminal 100 chooses the service program 131 stored in IC card 101 by the 
cardholder's 102 selection, etc. as Step S502. In this processing, the settlement system 100 
chooses first the dedicated file in which the service program 131 is stored by publishing a file 
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selection command to IC card 101. It continues, and by publishing a command with the 
specific settlement system 100 to the service program 131, processing based on the service 
program 131 is performed until PIN attestation is needed. 

[0052]Next, the cardholder's 102 input of common PIN 105 will decode individual PIN as Step 
S503 from PIN management data previously read from an IC card using common PIN inputted 
into the terminal 100. In this processing, it performs until it succeeds processing which extracts 
individual PIN explained using drawing 4 to all the PIN management data read from an IC 
card. Here, if extracting processing of individual PIN ends in failure, an operation method of 
interrupting settling processing will be considered first. Or if extracting processing of individual 
PIN goes wrong, an operation method of continuing settling processing after considering that 
common PIN inputted into the terminal 100 is individual PIN will also be considered. About a 
case of the latter, the cardholder 102 becomes an operation method in a case of inputting 
either common PIN or individual PIN as Step S503. 

[0053]Next, it confirms whether perform PIN attestation off-line or carry out on-line as Step 
S504. Supposing it performs off-line PIN attestation, the settlement system 100 will transmit 
extracted individual PIN to I C card 101 as Step S505. The settlement system 100 is publishing 
an PIN verification command to the service program 131, transmits individual PIN to IC card 
101, and makes individual PIN compare inside in this processing. If one side is also carried out 
and on-line attestation is performed, the settlement system 100 transmits extracted individual 
PIN to a center via a network as Step S506. After off-line PIN attestation or on-line PIN 
attestation is completed according to a procedure explained above, as Step S507, the terminal 
100 is specific to IC card 101, carries out command issue of the remaining settling processings 
to it, and is continued. 

[0054]Next, a 2nd embodiment is described. The composition of the IC card and settlement 
system concerning this embodiment is the same as the composition shown by explanation 
using drawing 1 by a 1st embodiment. The composition of the information stored in the IC card 
concerning this embodiment is the same as the composition explained using drawing 2 by a 
1st embodiment. The procedure which extracts individual PIN from PIN management data is 
the same as the procedure explained using drawing 4 by a 1st embodiment. However, 
according to this embodiment, let the terminal 100 be what has possible communicating with 
the PIN control program stored in IC card 101, and two or more service programs 
simultaneously. In this embodiment, the PIN control program 132 stored in IC card 101 shall 
perform processing which extracts individual PIN from PIN management data. 
[0055]Hereafter, a realization method of this embodiment is shown. First, drawing 6 is a block 
diagram of a command of APDU form. In drawing 6 , a command of APUD form comprises the 
class 610, the command 611, the parameter 1 (612), the parameter 2 (613), Lc614, the data 
615, and Le616. The class 610 is an identifier of a service program which communicates using 
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a command. The command 61 1 shows an instruction code of a command. The parameter 1 
(612) and the parameter 2 (613) store a value of a parameter depending on the command 61 1 . 
Lc614 expresses the length of the data 615 which is the next field. The data 615 is the field 
which stores data transmitted to an IC card. Le616 expresses the length of a response 
returned from an IC card. 

[0056]ln drawing 6 , the class 610 comprises the command type 620, the security message 
type 621, and the logical channel number 622. The command type 620 is the field for 
classifying the command 61 1. A security message type is the field showing whether encryption 
processing for preventing tapping and an alteration of the data 615 is performed. The logical 
channel number 622 is used in order to distinguish the command published to the program 
stored in the IC card using a logical address. That is, it becomes possible by changing the 
value of the logical channel number 622 to communicate with two or more programs in an IC 
card simultaneously. 

[0057]ln the above explanation, although explained taking the case of the command of APDU 
form, if it has a function equivalent to the function using a logical channel, even if it is a 
command of other forms, it is applicable to this invention. 

[0058]Next, the process flow of the settlement system 100 concerning this embodiment is 
explained. Drawing 7 is a flow chart in case the cardholder 102 performs settling processing 
with the settlement system 100 using IC card 101. This example explains the command which 
the settlement system 100 transmits to IC card 101 as what uses APDU form. The IC card 
stores the service program 131 and the PIN control program 132, and the settlement system 
100, It shall communicate simultaneously, using logical channel B as a logical channel number 
of the command published to the PIN control program 132 using logical channel A as a logical 
channel number of the command published to the service program 131. 
[0059]First, if IC card 101 is inserted in the settlement system 100, initialization processing of 
an IC card will be performed as Step S700. In this processing, the settlement system 100 
transmits a reset request to IC card 101, and receiving a reset response from IC card 101 after 
that is performed. 

[0060]Next, the settlement system 100 chooses the service program 131 stored in IC card 101 
by the cardholder's 102 selection, etc. as Step S701. In this processing, the dedicated file in 
which the service program 131 is stored is first chosen by the settlement system 100 
publishing a file selection command to IC card 101 using logical channel A. It continues, and 
by publishing a command with the specific settlement system 100 to the service program 131 
using logical channel A, processing based on the service program 131 is performed until PIN 
attestation is needed. 

[0061]Here, before performing PIN attestation, the settlement system 100 publishes a file 
selection command to IC card 101, using logical channel B as Step S702, and chooses the 
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dedicated file in which the PIN control program 132 is stored. 

[0062]Next, when the cardholder 102 inputs common PIN into the settlement system 100, the 
settlement system 100 transmits common PIN to IC card 101, and has individual PIN replied 
from IC card 101 as Step S703. In this processing, the settlement system 100 publishes an 
individual PIN acquisition command to the PIN control program 132 using logical channel B. 
Here, a flag with which individual PIN corresponding to common PIN and the service program 
131 to application-identifier-AID and acquire expresses an object for on-line or an object for 
off-line shall be stored in an individual PIN acquisition command. If these data is acquired, 
according to procedure explained using drawing 4 by a 1st embodiment, the PIN control 
program 132 will extract individual PIN, and will reply it to the settlement system 100. 
[0063]Next, the settlement system 100 confirms whether perform PIN attestation off-line or 
carry out on-line as Step S704. 

[0064]lf off-line PIN attestation is performed, the settlement system 100 will transmit acquired 
individual PIN to IC card 101 as Step S705. The settlement system 100 is publishing an PIN 
verification command to the service program 131, and makes individual PIN compare by IC 
card 101 inside in this processing. 

[0065]On the other hand, if on-line attestation is performed, the settlement system 100 
transmits acquired individual PIN to a center via a network as Step S706. 
[0066]After off-line PIN attestation or on-line PIN attestation is completed according to a 
procedure explained above, as Step S707, the terminal 100 is specific to IC card 101, carries 
out command issue of the remaining settling processings to it, and is continued. 
[0067]Next, a 3rd embodiment is described. Composition of an IC card and a settlement 
system concerning this embodiment and composition of information stored in an IC card are 
the same as composition explained by a 2nd embodiment. Furthermore, in this embodiment, 
an PIN control program stored in IC card 101 or two or more service programs are IC card 101 
insides, and let them be what has possible transmitting and receiving a command of APDU 
form mutually. Such processing is realizable by using a "delegation function" which is one of 
the functions which MULTOS known as an operating system for IC cards has, for example. 
[0068]This delegation function is explained using drawing 8 . In drawing 8 , the program A650 
and the program B651 are stored in IC card 101. First, when the settlement system 100 
publishes the command A of APDU form to the program A650, the program A650 publishes 
the command B of APDU form to the program B651, and makes the program B651 execute 
arbitrary processings by proxy. Next, the program B651 is returned to the program A650 by 
making a result of vicarious execution processing into the response B. And the program A650 
returns the response A to the settlement system 100 based on a result of the response B. 
[0069]As explained above, if a program with IC card 101 inside receives a command from the 
IC card 101 exterior, The function made to execute by proxy by transmitting a command to 
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other programs which are in IC card 101 inside in a part of processing performed based on the 
received command is called a delegation function. 

[0070]ln this embodiment, although the delegation function mentioned above is used, it does 
not matter even if it is the composition using other operating systems which have a function 
equivalent to a delegation function as an operating system of an IC card even if it does not use 
MULTOS. 

[0071]Next, the process flow of the settlement system 100 concerning this embodiment is 
explained. Drawing 9 is a flow chart in case the cardholder 102 performs settling processing 
with the settlement system 100 using IC card 101. In this example, the command which the 
settlement system 100 transmits to IC card 101 shall use APDU form. The IC card stores the 
service program 131 and the PIN control program 132, and the settlement system 100, It shall 
communicate simultaneously, using logical channel B as a logical channel number of the 
command published to the PIN control program 132 using logical channel A as a logical 
channel number of the command published to the service program 131. 
[0072]First, if IC card 101 is inserted in the settlement system 100, initialization processing of 
an IC card will be performed as Step S800. In this processing, the settlement system 100 
transmits a reset request to IC card 101, and receiving a reset response from IC card 101 after 
that is performed. 

[0073]Next, the settlement system 100 chooses the service program 131 stored in IC card 101 
by the cardholder's 102 selection, etc. as Step S801. In this processing, a dedicated file in 
which the service program 131 is stored is first chosen by the settlement system 100 
publishing a file selection command to IC card 101 using logical channel A. It continues, and 
processing based on the service program 131 is performed until PIN attestation is needed, 
because the settlement system 100 publishes a specific command to the service program 131 
using logical channel A. 

[0074]Here, before performing PIN attestation, the settlement system 100 publishes a file 
selection command to IC card 101, using logical channel B as Step S802, and chooses a 
dedicated file in which the PIN control program 132 is stored. 

[0075]Next, when the cardholder 102 inputs common PIN into the settlement system 100, the 
settlement system 100 transmits common PIN to IC card 101, and makes PIN verification 
perform by IC card 101 inside as Step S803. In this processing, the settlement system 100 
publishes an PIN verification command to the PIN control program 132 first using logical 
channel B. Here, common PIN and the application identifier AID corresponding to the service 
program 131 shall be stored in an PIN verification command. Next, the PIN control program 
132 will extract individual PIN according to procedure explained using drawing 4 by a 1st 
embodiment, if these data is acquired. Next, the PIN control program 132 publishes an PIN 
verification command which stored extracted individual PIN to the service program 131, makes 
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individual PIN compare with the service program 131, and acquires a matching result. And the 
PIN control program 132 replies a matching result to the settlement system 100. Here, 
processing of Step S803 is realizable by using a delegation function mentioned above. 
[0076]After PIN attestation is completed according to the procedure explained above, as Step 
S804, the terminal 100 is specific to IC card 101, carries out command issue of the remaining 
settling processings to it, and is continued. 

[0077]Next, a 4th embodiment is described. First, the composition of the IC card and 
settlement system concerning this embodiment is shown in drawing 10 . Although the 
composition shown in drawing 10 is the same as the composition shown in drawing 1 by 
explanation of a 1st embodiment, the point that the PIN input means 113 replaced the 
fingerprint reading means 190 differs from the point that the cardholder 102 does not need to 
memorize common PIN 105. 

[0078]Here, the fingerprint reading means 190 identifies the cardholder's 102 fingerprint, and 
has the function to extract fingerprint information, therefore - it is that the cardholder 102 
makes his fingerprint identify by the fingerprint reading means 190 in this embodiment instead 
of inputting PIN into the settlement system 100 - the person himself/herself - it attests. 
[0079]Next, the composition of the information stored in the IC card concerning this 
embodiment is shown in drawing 1 1 . Although the composition shown in drawing 1 1 is the 
same as the composition shown in drawing 2 by explanation of a 1st embodiment, It differs in 
that AID, the data 144A, 144B, and 144C which comprises individual PIN, and the fingerprint 
information 191 are stored instead of storing the PIN management data 142A, 142B, and 142C 
in the PIN management dedicated file 122. Here, AID which constitutes the data 144A 
corresponds to the dedicated file 121 A, and individual PIN is used for the off-line PIN 
attestation performed by the service program 131A stored in the dedicated file 121A. Similarly 
AID which constitutes the data 144B corresponds to the dedicated file 121 B, and individual 
PIN is used for the off-line PIN attestation performed by the service program 131B. AID which 
constitutes the data 144C corresponds to the dedicated file 121 C, and individual PIN is used 
for the on-line PIN attestation performed by the service program 131C. The fingerprint 
information 191 is information corresponding to the cardholder's 102 fingerprint. Unless 
collation of the fingerprint information 191 is successful, it has come to be unable to perform 
reading the data 144A, 144B, and 144C to the exterior here. 

[0080]Next, a process flow of the settlement system 100 concerning this embodiment is 
explained. Drawing 12 is a flow chart in case the cardholder 102 performs settling processing 
with the settlement system 100 using IC card 101. Although a flow chart shown in drawing 12 
is the same to a flow shown in drawing 7 by explanation of a 2nd embodiment, and Step S702, 
it differs in that the cardholder 102 is making the settlement system 100 identify a fingerprint 
instead of inputting common PIN into the settlement system 100. 
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[0081]That is, a fingerprint which the settlement system 100 identified is changed into 
fingerprint information by a fingerprint reading means, and the settlement system 100 transmits 
fingerprint information to IC card 101, and has specific individual PIN replied from IC card 101 
in Step S1000. In this processing, the settlement system 100 publishes an individual PIN 
acquisition command to the PIN control program 132. An application identifier corresponding to 
fingerprint information and the service program 131 is stored in an individual PIN command 
here, and the PIN control program 132, When an individual PIN command was received, 
fingerprint information is compared and collation is successful, individual PIN corresponding to 
a specified application identifier is returned to the settlement system 100. The settlement 
system 100 is using this individual PIN, and it becomes possible to perform the same PIN 
attestation as a 2nd embodiment. 

[0082]As explained above, when the cardholder 102 receives one which can be performed of 
services using IC card 101, in this embodiment, it becomes possible to make the settlement 
system 100 only identify a fingerprint, and to perform PIN attestation which needs to be 
performed for every service. The cardholder 102 inputs common PIN here instead of making 
the settlement system 100 identify a fingerprint, When common PIN is recorded and collation 
of common PIN is successful within IC card 101 instead of recording fingerprint information on 
IC card 101, even if it is the composition which can read individual PIN from an IC card, it is a 
scope of this invention. 
[0083] 

[Effect of the lnvention]As explained above, when an IC card owner receives each service 
using the IC card corresponding to two or more services according to this invention, It 
becomes possible to improve an IC card owner's convenience by having composition which 
can be performed only by making a fingerprint identify as one common PIN is kept in mind for 
the PIN attestation which needs to be performed for every service. 
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[Field of the lnvention]an IC card is used for this invention - the person himself/herself - it is 
related with the IC card terminal equipment and the person-himself/herself authentication 
method which attest. 
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PRIOR ART 

[Description of the Prior Art]ln recent years, an IC card is spreading widely instead of a 
magnetic card. This is because there is the feature provided with the arithmetic unit 
(microprocessor) for performing cipher processing with a large storage capacity, etc. which is 
not in a magnetic card that an inside can be observed easily and nothing is (it has the Tampa- 
proof nature) in an IC card. By applying an IC card with such a feature to a settlement system, 
an identification system, etc., security can be raised compared with a magnetic card, or the 
new service which was not able to be realized in a magnetic card can be provided. For 
example, there are electronic money and a credit card as service which a settlement system 
provides, and an employee ID card, a driver's license, etc. are raised as service which an 
identification system provides. 

[0003]The IC card is classified into the contact type and the noncontact type according to the 

communication method. 

Each specification is already standardized. 

For example, a contact smart card is ISO (International Organization for Standardization: 
International Organization for Standardization), and is standardized as ISO/IEC7816. The IC 
card based on ISO/IEC7816 calculates inside according to the command which transmits from 
a terminal, is performing returning a result as a response one by one, and carries out 
processing for realizing service. 

[0004]Here, the command and response which are transmitted and received between IC card 
terminals are specified in the form of APDU (Application Protocol Data Unit) ISO/IEC7816. The 
IC card based on ISO/IEC7816 is stored in the file in which a program and data had a layered 
structure as shown in drawing 13 . 

[0005]ln drawing 13 , the main file (MF) 900 is a file of a top layer, and exists only one in an IC 
card, and two or more dedicated file (DF)901A, and 901 B and 901 C exist in the bottom of it. 
Data (it is called service information below) required for the program (it is called the service 
program below) and service execution for performing specific service is stored in a dedicated 
file. Since two or more existence is possible for a dedicated file in an IC card, two or more 
services can be used by the IC card of one sheet by storing two or more service programs and 
service information in a different dedicated file. 

[0006] In order to execute a specific service program, a terminal chooses first the dedicated file 
in which the specific service program is stored as a file of KARENTO using the "file selection 
command" specified as a command of APDU form. Thereby, the command which an IC card 
receives from a terminal after it comes to be processed according to the selected service 
program. Here, each dedicated file is identifiable from the outside by ID called an application 
identifier (it omits the following AID). For example, the "file selection command" can choose a 
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specific dedicated file by specifying AID. 

[0007]now, the case where service is received using an IC card -- a cardholder - the 
attestation which it may be urged to attest that the person himself/herself is using that card, for 
this reason it performs - the person himself/herself - it is called attestation. The PIN 
attestation as which a cardholder inputs the password called PIN into a terminal as a method 
for realizing person-himself/herself attestation is common. PIN attestation includes "off-line PIN 
attestation" compared with PIN which has memorized PIN which the cardholder inputted in an 
IC card, and "on-line PIN attestation" compared with PIN in which the center holds PIN which 
the cardholder inputted via a network, the persons themselves himself/herself, such as PIN 
attestation, - attesting is important in order to prevent the illegal use of an IC card. 
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[Effect of the lnvention]As explained above, when an IC card owner receives each service 
using the IC card corresponding to two or more services according to this invention, It 
becomes possible to improve an IC card owner's convenience by having composition which 
can be performed only by making a fingerprint identify as one common PIN is kept in mind for 
the PIN attestation which needs to be performed for every service. 
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[Effect of the InventionJAs explained above, when an IC card owner receives each service 
using the IC card corresponding to two or more services according to this invention, It 
becomes possible to improve an IC card owner's convenience by having composition which 
can be performed only by making a fingerprint identify as one common PIN is kept in mind for 
the PIN attestation which needs to be performed for every service. 
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[Problem to be solved by the invention]As explained above, can use various services by an IC 
card of one sheet by using an IC card, but. On the other hand, in order to use each service, 
when performing PIN attestation, a cardholder keeps different PIN for every service in mind, 
and may have to use PIN properly for every service to be used. This becomes a factor which 
spoils a card user's convenience greatly. 

[0009]Then, when this invention receives each service using an IC card corresponding to two 
or more services in an IC card owner, an IC card terminal which can improve an IC card 
owner's convenience by carrying out PIN attestation which needs to be performed for every 
service to composition which can be performed only by keeping one common PIN in mind, and 
the person himself/herself - it aims at providing an authentication method. 
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MEANS 

[Means for solving problem]ln this invention, the service program to process the service which 
needs a cardholder's justification check To achieve the above objects, one or more pieces, 
The individual password used in order to perform said cardholder's justification check One or 
more pieces, The password inputting means as which said cardholder can input the 1st 
password in the IC card terminal using the IC card one or more encryption passwords which 
enciphered said individual password were remembered to be, The card write means which 
communicates with said IC card, and the information accumulation means which accumulates 
the information acquired from said IC card, Said encryption password is read from said IC card 
by said card write means, Said encryption password which was accumulated in said 
information accumulation means and accumulated in said information accumulation means is 
read, Decrypt by said 1st password, generate the 2nd password, and said 2nd password is 
transmitted to said IC card by said card write means, When said 2nd password is in agreement 
with said individual password inside said IC card, it has an arithmetic processing means which 
carries out normal execution of said service. 

[001 1]ln this invention, a service program to process service which needs a cardholder's 
justification check One or more pieces, An individual password used in order to perform said 
cardholder's justification check One or more pieces, An IC card one or more encryption 
passwords which enciphered said individual password were remembered to be, the person 
himself/herself in a system which consists of an IC card terminal which provides said service 
for said cardholder using said IC card -- an authentication method with a processing step to 
which said IC card terminal reads said encryption password from said IC card. A processing 
step which accumulates said encryption password which said IC card terminal read from said 
IC card, A processing step as which said card holder inputs the 1st password into said IC card 
terminal, A processing step which decrypts said encryption password which said IC card 
terminal is accumulating by said 1st password, and generates the 2nd password, When said 
IC card terminal transmits said 2nd password to said IC card and said 2nd password is in 
agreement with said individual password inside said IC card, a processing step which carries 
out normal execution of said service is included. 

[0012]Namely, in order to solve an aforementioned problem, this invention, A service program 
to process service which needs a cardholder's justification check One or more pieces, An 
individual password used in order to perform said cardholder's justification check One or more 
pieces, A password inputting means as which said cardholder can input the 1st password in an 
IC card terminal using an IC card one or more encryption passwords which enciphered said 
individual password were remembered to be, A card write means which communicates with 
said IC card, and said encryption password are read from said IC card by said card write 
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means, Decrypt by said 1st password and it has an arithmetic processing means which 
transmits the 2nd password that generated and generated the 2nd password to said IC card by 
said card write means, When said 2nd password was in agreement with said individual 
password inside said IC card, it was made to carry out normal execution of said service. 
[0013]This invention establishes an information accumulation means which accumulates 
information acquired from said IC card in the above-mentioned IC card terminal, and reads 
said encryption password from said IC card by said card write means, Said encryption 
password which was accumulated in this information accumulation means and accumulated in 
this information accumulation means is read, and it was made to decode by the 1st password. 
[0014]ln the above-mentioned IC card terminal, this invention said encryption password, 
Encipher using said 1st password and what combined said individual password and fixed value 
data which consists of a specific value said arithmetic processing means, When said fixed 
value data corrected to data which decrypted said encryption password using said 1st 
password and ** was contained in it, we decided to judge that said said 2nd password 
produced by decrypting is equal to said individual password. 

[0015]ln order to solve an aforementioned problem, a service program which processes 
service which needs a cardholder's justification check this invention One or more pieces, An IC 
card one or more encryption passwords which enciphered an individual password used in 
order to perform said cardholder's justification check were remembered to be is used, A 
password inputting means as which said cardholder can input the 1st password in an IC card 
terminal which communicates with a center apparatus which is keeping said individual 
password, A card write means which communicates with said IC card, and a means of 
communication which communicates with said center apparatus via a network, Said encryption 
password read from said IC card by said card write means is decrypted by said 1st password, 
When the 2nd password was generated, it had an arithmetic processing means which 
transmits said 2nd password to said center apparatus by said means of communication and 
said 2nd password was in agreement with said individual password with said center apparatus, 
we decided to carry out normal execution of said service. 

[0016]This invention establishes the information accumulation means which accumulates the 
information acquired from said IC card in the above-mentioned IC card terminal, and reads 
said encryption password from said IC card by said card write means, Said encryption 
password which was accumulated in this information accumulation means and accumulated in 
this information accumulation means is read, and it was made to decode by the 1st password. 
[0017]ln the above-mentioned IC card terminal, this invention said encryption password, 
Encipher using said 1st password and what combined said individual password and the fixed 
value data which consists of a specific value said arithmetic processing means, When said 
fixed value data corrected to the data which decrypted said encryption password using said 1st 
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password and ** was contained in it, we decided to judge that said said 2nd password 
produced by decrypting is equal to said individual password. 

[0018]ln order to solve an aforementioned problem, the service program which processes the 
service which needs a cardholder's justification check this invention One or more pieces, The 
individual password used in order to perform said cardholder's justification check One or more 
pieces, The IC card one or more encryption passwords which enciphered said individual 
password were remembered to be, the person himself/herself in the system which consists of 
an IC card terminal which provides said service for said cardholder using said IC card ~ an 
authentication method with the processing step to which said IC card terminal reads said 
encryption password from said IC card. The processing step which accumulates said 
encryption password which said IC card terminal read from said IC card, The processing step 
as which said card holder inputs the 1st password into said IC card terminal, The processing 
step which decrypts said encryption password which said IC card terminal is accumulating by 
said 1st password, and generates the 2nd password, When said IC card terminal transmitted 
said 2nd password to said IC card and said 2nd password was in agreement with said 
individual password inside said IC card, it was made for the processing step which carries out 
normal execution of said service to be included. 

[0019]ln order to solve an aforementioned problem, the service program which processes the 
service which needs a cardholder's justification check this invention One or more pieces, The 
IC card one or more encryption passwords which enciphered the individual password used in 
order to perform said cardholder's justification check were remembered to be, The IC card 
terminal which provides said service for said cardholder using said IC card, the person 
himself/herself in the system which consists of a center apparatus which is connected with said 
IC card terminal via the network, and is keeping said individual password ~ an authentication 
method, The processing step to which said IC card terminal reads said encryption password 
from said IC card, The processing step which accumulates said encryption password which 
said IC card terminal read from said IC card, The processing step as which said card holder 
inputs the 1st password into said IC card terminal, The processing step which decrypts said 
encryption password which said IC card terminal is accumulating by said 1st password, and 
generates the 2nd password, When said IC card terminal transmits said 2nd password to said 
center apparatus and said 2nd password is in agreement with said individual password with 
said center apparatus, It was made for the processing step which carries out normal execution 
of said service to be included. 

[0020]ln order to solve an aforementioned problem, a service program which processes 
service which needs a cardholder's justification check this invention One or more pieces, An 
individual password used in order to perform said cardholder's justification check One or more 
pieces, An IC card a password control program in which an encryption password which 
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enciphered said individual password manages one or more pieces and said encryption 
password was remembered to be, the person himself/herself in a system which consists of an 
IC card terminal which provides said service for said cardholder using said IC card - an 
authentication method with a processing step as which said cardholder inputs the 1st 
password into said IC card terminal. A processing step at which said IC card terminal transmits 
said 1st password to said IC card, Said password control program executed within said IC card 
decrypts said encryption password by said 1st password, and generates the 2nd password, It 
was made for a processing step which transmits to said IC card terminal, and a processing 
step which carries out normal execution of said service when said IC card terminal transmits 
said 2nd password to said IC card and said 2nd password is in agreement with said individual 
password inside said IC card to be included. 

[0021]ln order to solve an aforementioned problem, a service program which processes 
service which needs a cardholder's justification check this invention One or more pieces, An 
individual password used in order to perform said cardholder's justification check One or more 
pieces, An IC card a password control program in which an encryption password which 
enciphered said individual password manages one or more pieces and said encryption 
password was remembered to be, the person himself/herself in a system which consists of an 
IC card terminal which provides said service for said cardholder using said IC card - an 
authentication method with a processing step as which said card holder inputs the 1st 
password into said IC card terminal. A processing step at which said IC card terminal transmits 
said 1st password to said IC card, A processing step which said password control program 
executed within said IC card decrypts said encryption password by said 1st password, and 
generates the 2nd password, When said password program transmitted the 2nd password to 
said service program and said 2nd password was in agreement with said individual password, 
it was made for a processing step which carries out normal execution of said service to be 
included. 

[0022]This invention is provided with the following in order to solve an aforementioned 
problem. 

The service program which processes the service which needs a cardholder's justification 
check is one or more pieces. 

The individual password used in order to perform said cardholder's justification check is one or 
more pieces. 

The password inputting means as which said cardholder can input the 2nd password in the IC 
card terminal which provides for said cardholder the **** aforementioned service for IC cards 
the 1st password that protects outputting said individual password outside was remembered to 
be. 

Transmit to said IC card by said IC card write means, and the card write means which 
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communicates with said IC card, and said 2nd password inside said IC card, When said 2nd 
password is in agreement with said 1st password, acquire said individual password by said IC 
card write means, and said individual password is transmitted to said IC card by said card write 
means, The arithmetic processing means which carries out normal execution of said service 
when collation of said individual password inside said IC card is successful. 

[0023]This invention is provided with the following in order to solve an aforementioned 
problem. 

The service program which processes the service which needs a cardholder's justification 
check is one or more pieces. 

The individual password used in order to perform said cardholder's justification check is one or 
more pieces. 

The 1st biological information that protects outputting said individual password outside. 
The biological information reading means in which the IC card terminal which provides said 
service for said cardholder using the IC card the control program which manages biological 
information was remembered to be can read the 2nd biological information in said cardholder, 
Transmit the card write means which communicates with said IC card, and said 2nd biological 
information to said IC card by said IC card write means, and inside said IC card, When said 
2nd biological information is in agreement with said 1st biological information, acquire said 
individual password by said IC card write means, and said individual password is transmitted 
to said IC card by said card write means, The arithmetic processing means which carries out 
normal execution of said service when collation of said individual password inside said IC card 
is successful. 

[0024]ln the above-mentioned IC card terminal, a fingerprint was used for this invention as said 

1st biological information and said 2nd biological information. 

[0025] 

[Mode for carrying out the inventionjHereafter, an embodiment of this invention is described. 
Although following embodiments explain a case where an IC card of a contact type is used, it 
is not an item required for this invention that it is a contact type, for example, this invention is 
here, applicable even if it is a noncontact IC card. In following embodiments, although a 
command transmitted and received between a terminal and an IC card assumes a command 
of APDU form, If it is a command set which it is not an item required for this invention to use a 
command of APDU form, and can realize a function equivalent to APDU form, this invention is 
applicable no matter what thing it may use. not an item in which it is required for this invention 
to be such a terminal although a terminal with a function to perform settlement of accounts for 
electronic money or a credit card as a terminal is assumed in following embodiments but the 
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person himself/herself - this invention is applicable if it is a terminal which attests. 
[0026]First, a 1st embodiment is described, drawing 1 - the person himself/herself - 
composition of an IC card and a terminal concerning this embodiment which attests is shown, 
in drawing 1 -- the person himself/herself -- attestation is performed between the settlement 
system 100, IC card 101, the cardholder 102, the salesclerk 103, and the network 104. 
Composition shown in drawing 1 assumes that the cardholder 102 performs settlement of 
accounts by electronic money or a credit card using IC card 101. Therefore, the settlement 
system 100 is a terminal provided with a clearing function by an IC card, for example, assumes 
ATM of a credit terminal or a financial institution. IC card 101 has composition that service of 
plurality, such as electronic money and a credit card, can be provided, the cardholder 102 -- 
the person himself/herself-- suppose that common PIN105 which can be used in common with 
two or more services which are PIN used for attestation and IC card 101 provides is 
memorized. 

[0027]Next, an internal configuration of the settlement system 100 is explained. The settlement 
system 100 has the card write means 110, the arithmetic processing means 1 1 1, the display 
device 112, the PIN input means 113, the information accumulation means 114, the control 
means 115, and the means of communication 116. 

[0028]The card write means 1 10 has the function to transmit a command to IC card 101 
(writing), or to receive a response from an IC card (reading), in order to communicate with IC 
card 101. 

[0029]The arithmetic processing means 1 1 1 comprises a microprocessor and a program 
storing memory, for example, controls the settlement system 100 whole based on a program 
stored in a program storing memory, and has a function which carries out settling processing. 
[0030]The displaying means 112 displays a variety of information of a settlement amount etc. 
as opposed to the cardholder 102. 

[0031 ]the PIN input means 1 13 - the cardholder 102 - the person himself/herself -- it has a 
function in which PIN for attestation can be inputted, for example using a ten key etc. 
[0032]The information accumulation means 114 has a function which accumulates temporarily 
or permanently information acquired from IC card 101 or the network 104, or information which 
the cardholder 102 and the salesclerk 103 inputted, for example, comprises a hard disk, 
semiconductor memory, etc. 

[0033]The control means 115 provides Interface Division for the salesclerk 103 to operate the 
settlement system 100, for example, comprises a keyboard, a bar code reader, a display, etc. 
[0034]The means of communication 1 16 is used in order to have a function which 
communicates with a center via the network 104, for example, to perform on-line PIN 
attestation. Here, in the case of unmanned terminals, such as financial institution ATM, the 
control means 115 may not be, and, in the salesclerk 103, the settlement system 100 does not 
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need to exist. When settling processing by the settlement system 100 is completed off-line, 
there may not be the means of communication 116. 

[0035]Next, an internal configuration of IC card 101 is explained. IC card 101 has the means of 
communication 117, the information accumulation means 118, and the arithmetic processing 
means 119. 

[0036]The means of communication 117 communicates with the card write means 110 of the 
settlement system 100, and has the function to receive a command from the settlement system 
100, or to reply a response to the settlement system 100. 

[0037JA program and data in which the information accumulation means 118 performs service 
which an IC card provides, Or it has the function to store information etc. which were acquired 
from the settlement system 100 temporarily or permanently, for example, comprises 
semiconductor memory, such as ROM (Read Only Memory), RAM (Random Access Memory), 
and a flash memory. 

[0038]The arithmetic processing means 119 is using a microprocessor, manages control of the 
whole IC card and has the function to execute a program stored in the information 
accumulation means 118. 

[0039]Next, composition of information stored in IC card 101 concerning this embodiment is 
shown in drawing 2 . Drawing 2 is the file organization of information accumulation means 118 
inside which constitutes IC card 101, and comprises the main file (MF) 120, dedicated file (DF) 
121A, 121 B and 121C, and the PIN management dedicated file 122. These files have a 
layered structure and have composition that the main file 120 is located in the top and the 
dedicated files 121A, 121B, and 121C and the PIN management dedicated file 122 are located 
in the lower layer. Different AID is assigned to each dedicated file and it is identifiable from the 
outside. 

[0040]Next, an internal configuration of the dedicated files 121 A, 121B, and 121C is explained, 
in the service program 131A which performs specific account settlement services in the 
dedicated file 121 A, and these account settlement services - the person himself/herself - 
individual PIN141A which is data required in order to perform attestation by off-line PIN 
attestation is stored. The service program 131 B and individual PIN141B are similarly stored in 
the dedicated file 121 B. account settlement services which the service program 131C is stored 
in the dedicated file 121C, and are performed by the service program 131C -- the person 
himself/herself - on-line PIN attestation shall be performed as attestation Therefore, PIN data 
is not stored in the dedicated file 121C. 

[0041]Next, the PIN management dedicated file 122 is explained. The PIN management 
dedicated file 122 is a dedicated file for PIN management. The PIN control program 132 which 
manages individual PIN individually used for the PIN management dedicated file 122 with the 
service programs 131A, 131B, and 131C, The PIN management data 142A, 142B, and 142C 
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which is data which the PIN control program 132 manages is stored. Data which needs the 
PIN management data 142Afor off-line PIN attestation performed by the service program 
131 A here is contained. Similarly, data which needs the PIN management data 142B for off- 
line PIN attestation performed by the service program 131 B is contained. Data which needs 
the PIN management data 142C for on-line PIN attestation performed by the service program 
131C is contained. 

[0042]Although three service programs are contained in the information accumulation means 
118 and the PIN control program has the composition of having managed three PIN 
management data, in this explanation, this invention is applicable also to the IC card in which 
arbitrary numbers of service programs are contained. For example, when IC card 101 contains 
four service programs, the PIN control program should just manage four PIN management 
data. This invention is applicable even if it is the composition of performing off-line PIN 
attestation even if the service program in IC card 101 is the composition of performing on-line 
PIN attestation. 

[0043]Next, the composition and the directions for PIN management data which the PIN 
control program 132 concerning this embodiment has managed are explained. First, the 
composition and the generation procedure of PIN management data are shown in drawing 3 . 
In drawing 3 , the PIN management data 142 has AID202, the control flag 203, and the 
composition that encryption individual PIN204 is contained. AID202 is an application identifier 
of the dedicated file in which the service program with which the PIN management data 142 
corresponds is stored. The control flag 203 shows the PIN authentic method (on-line or off- 
line) with which the PIN management data 142 corresponds. For example, 1 bit shall be 
assigned to the control flag 203 and, in the case of individual PIN for on-line in the case of "0", 
and "1", individual PIN for off-line shall be held at the PIN management data 142. Encryption 
individual PIN204 enciphers individual PIN and the contents of original individual PIN cannot 
be guessed only from encryption individual PIN204. 

[0044]As a generation procedure of the PIN management data 142, right AID202 is first set up 
as Step S200. Next, the right control flag 203 is set up as Step S201. Next, encryption 
processing is performed by using as an encryption key common PIN105 to which the 
cardholder set the data which combined individual PIN141 and the fixed pattern 201 as Step 
S202, and the cryptogram outputted is set to encryption individual PIN204. Here, the fixed 
pattern 201 is a certain specific bit string, and is defined as a fixed value. It is possible to use 
DES which is a cryptographic algorithm based on a block cipher system, for example as 
encryption processing performed at Step S202. Or other encryption algorithms may be used. 
[0045]The above generation procedure is performed, when registering the PIN management 
data 142 newly and changing common PIN105, and when changing individual PIN141. What is 
necessary is just to replace with old PIN management data the PIN management data 
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generated by new common PIN, when changing common PIN. What is necessary is similarly, 
just to replace with old PIN management data the PIN management data generated from new 
individual PIN, when changing individual PIN. 

[0046]Next, procedure which extracts individual PIN from PIN management data is shown in 
drawing 4 . This procedure is performed by using the arithmetic processing means 1 1 1 which 
constitutes the settlement system 100 shown in drawing 1 . In drawing 4 , the PIN management 
data 142 has AID202, the control flag 203, and composition that encryption individual PIN204 
is contained, as mentioned above. 

[0047]First, it is investigated whether it is in agreement with an application identifier of a 
dedicated file in which a service program which checks AID202 and uses individual PIN as 
Step S300 is stored. If AID is not in agreement, the end of this processing of unjust is carried 
out. If AID is in agreement, next, as Step S301 , the control flag 203 will be checked and it will 
be investigated whether the control flag 203, a shown PIN authentic method (off-line or on- 
line), and an PIN authentic method which a service program which uses individual PIN holds 
are in agreement. If an PIN authentic method is not in agreement, the end of the processing of 
unjust is carried out. When an PIN authentic method is in agreement, next, as Step S302, by 
using common PIN105 as an encryption key, decoding processing is performed and a plaintext 
outputted is divided into individual PIN141 and the fixed pattern 201. Here, as common 
PIN105, the cardholder 102 uses what was inputted into the terminal 100. 
[0048]Next, it is verified whether the acquired fixed pattern 201 is a right value as Step S303. 
Here, the terminal 100 presupposes that a right value of a fixed pattern is known beforehand. If 
the fixed pattern 201 is not a right value, the end of this processing of unjust will be carried out. 
If the fixed pattern 201 is a right value, it will consider that individual PIN141 has been acquired 
correctly and normal termination of this processing will be carried out. 
[0049]Next, a process flow of the settlement system 100 concerning this embodiment is 
explained. Drawing 5 is a flow chart in case the cardholder 102 performs settling processing 
with the settlement system 100 using IC card 101. Here, this settling processing shall be 
performed using the arithmetic processing means 1 1 1 which constitutes the settlement system 
100 shown by drawing 1 . In this example, although an IC card stores the service program 131 
and the PIN control program 132, the settlement system 100 shall not communicate 
simultaneously with two or more programs stored in IC card 101 . A command which the 
settlement system 100 transmits to IC card 101 is explained as what uses APDU form. 
[0050]First, if IC card 101 is inserted in the settlement system 100, initialization processing of 
an IC card will be performed as Step S500. In this processing, the settlement system 100 
transmits a reset request to IC card 101, and receiving a reset response from IC card 101 after 
that is performed. Next, the settlement system 100 reads all the PIN management data stored 
in IC card 101 as Step S501 . In this processing, the settlement system 100 chooses first the 
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PIN management dedicated file in which the PIN control program 132 is stored by publishing a 
file selection command to IC card 101. The PIN management data 142 is altogether read 
because continue and the settlement system 100 publishes a data readout command to the 
PIN control program 132. The read PIN management data is stored in the information 
accumulation means 1 14 shown in drawing 1 . 

[0051]Next, the terminal 100 chooses the service program 131 stored in IC card 101 by the 
cardholder's 102 selection, etc. as Step S502. In this processing, the settlement system 100 
chooses first the dedicated file in which the service program 131 is stored by publishing a file 
selection command to IC card 101. It continues, and by publishing a command with the 
specific settlement system 100 to the service program 131, processing based on the service 
program 131 is performed until PIN attestation is needed. 

[0052]Next, the cardholder's 102 input of common PIN 105 will decode individual PIN as Step 
S503 from the PIN management data previously read from the IC card using common PIN 
inputted into the terminal 100. In this processing, it performs until it succeeds the processing 
which extracts individual PIN explained using drawing 4 to all the PIN management data read 
from the IC card. Here, if the extracting processing of individual PIN ends in failure, the 
operation method of interrupting settling processing will be considered first. Or if the extracting 
processing of individual PIN goes wrong, the operation method of continuing settling 
processing after considering that common PIN inputted into the terminal 100 is individual PIN 
will also be considered. About the case of the latter, the cardholder 102 becomes an operation 
method in the case of inputting either common PIN or individual PIN as Step S503. 
[0053]Next, it confirms whether perform PIN attestation off-line or carry out on-line as Step 
S504. Supposing it performs off-line PIN attestation, the settlement system 100 will transmit 
extracted individual PIN to IC card 101 as Step S505. The settlement system 100 is publishing 
an PIN verification command to the service program 131, transmits individual PIN to IC card 
101, and makes individual PIN compare inside in this processing. If one side is also carried out 
and on-line attestation is performed, the settlement system 100 transmits extracted individual 
PIN to a center via a network as Step S506. After off-line PIN attestation or on-line PIN 
attestation is completed according to the procedure explained above, as Step S507, the 
terminal 100 is specific to IC card 101, carries out command issue of the remaining settling 
processings to it, and is continued. 

[0054]Next, a 2nd embodiment is described. The composition of the IC card and settlement 
system concerning this embodiment is the same as the composition shown by explanation 
using drawing 1 by a 1st embodiment. The composition of the information stored in the IC card 
concerning this embodiment is the same as the composition explained using drawing 2 by a 
1st embodiment. The procedure which extracts individual PIN from PIN management data is 
the same as the procedure explained using drawing 4 by a 1st embodiment. However, 
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according to this embodiment, let the terminal 100 be what has possible communicating with 
the PIN control program stored in IC card 101, and two or more service programs 
simultaneously. In this embodiment, the PIN control program 132 stored in IC card 101 shall 
perform processing which extracts individual PIN from PIN management data. 
[0055]Hereafter, the realization method of this embodiment is shown. First, drawing 6 is a 
block diagram of the command of APDU form. In drawing 6 , the command of APUD form 
comprises the class 610, the command 611, the parameter 1 (612), the parameter 2 (613), 
Lc614, the data 615, and Le616. The class 610 is an identifier of the service program which 
communicates using a command. The command 61 1 shows the instruction code of a 
command. The parameter 1 (612) and the parameter 2 (613) store the value of the parameter 
depending on the command 61 1 . Lc614 expresses the length of the data 615 which is the next 
field. The data 615 is the field which stores the data transmitted to an IC card. Le616 
expresses the length of the response returned from an IC card. 

[0056]ln drawing 6 , the class 610 comprises the command type 620, the security message 
type 621 , and the logical channel number 622. The command type 620 is the field for 
classifying the command 61 1 . A security message type is the field showing whether encryption 
processing for preventing tapping and an alteration of the data 615 is performed. The logical 
channel number 622 is used in order to distinguish a command published to a program stored 
in an IC card using a logical address. That is, it becomes possible by changing a value of the 
logical channel number 622 to communicate with two or more programs in an IC card 
simultaneously. 

[0057]ln the above explanation, although explained taking the case of a command of APDU 
form, if it has a function equivalent to a function using a logical channel, even if it is a 
command of other forms, it is applicable to this invention. 

[0058]Next, a process flow of the settlement system 100 concerning this embodiment is 
explained. Drawing 7 is a flow chart in case the cardholder 102 performs settling processing 
with the settlement system 100 using IC card 101. This example explains a command which 
the settlement system 100 transmits to IC card 101 as what uses APDU form. An IC card 
stores the service program 131 and the PIN control program 132, and the settlement system 
100, It shall communicate simultaneously, using logical channel B as a logical channel number 
of a command published to the PIN control program 132 using logical channel A as a logical 
channel number of a command published to the service program 131 . 
[0059]First, if IC card 101 is inserted in the settlement system 100, initialization processing of 
an IC card will be performed as Step S700. In this processing, the settlement system 100 
transmits a reset request to IC card 101, and receiving a reset response from IC card 101 after 
that is performed. 

[0060]Next, the settlement system 100 chooses the service program 131 stored in IC card 101 
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by the cardholder's 102 selection, etc. as Step S701. In this processing, a dedicated file in 
which the service program 131 is stored is first chosen by the settlement system 100 
publishing a file selection command to IC card 101 using logical channel A. It continues, and 
by publishing a command with the specific settlement system 100 to the service program 131 
using logical channel A, processing based on the service program 131 is performed until PIN 
attestation is needed. 

[0061]Here, before performing PIN attestation, the settlement system 100 publishes a file 
selection command to IC card 101, using logical channel B as Step S702, and chooses a 
dedicated file in which the PIN control program 132 is stored. 

[0062]Next, when the cardholder 102 inputs common PIN into the settlement system 100, the 
settlement system 100 transmits common PIN to IC card 101, and has individual PIN replied 
from IC card 101 as Step S703. In this processing, the settlement system 100 publishes an 
individual PIN acquisition command to the PIN control program 132 using logical channel B. 
Here, a flag with which individual PIN corresponding to common PIN and the service program 
131 to application-identifier-AID and acquire expresses an object for on-line or an object for 
off-line shall be stored in an individual PIN acquisition command. If these data is acquired, 
according to procedure explained using drawing 4 by a 1st embodiment, the PIN control 
program 132 will extract individual PIN, and will reply it to the settlement system 100. 
[0063]Next, the settlement system 100 confirms whether perform PIN attestation off-line or 
carry out on-line as Step S704. 

[0064]lf off-line PIN attestation is performed, the settlement system 100 will transmit acquired 
individual PIN to IC card 101 as Step S705. The settlement system 100 is publishing an PIN 
verification command to the service program 131, and makes individual PIN compare by IC 
card 101 inside in this processing. 

[0065]On the other hand, if on-line attestation is performed, the settlement system 100 
transmits acquired individual PIN to a center via a network as Step S706. 
[0066]After off-line PIN attestation or on-line PIN attestation is completed according to the 
procedure explained above, as Step S707, the terminal 100 is specific to IC card 101, carries 
out command issue of the remaining settling processings to it, and is continued. 
[0067]Next, a 3rd embodiment is described. The composition of the IC card and settlement 
system concerning this embodiment and the composition of the information stored in an IC 
card are the same as the composition explained by a 2nd embodiment. Furthermore, in this 
embodiment, the PIN control program stored in IC card 101 or two or more service programs 
are IC card 101 insides, and let them be what has possible transmitting and receiving the 
command of APDU form mutually. Such processing is realizable by using the "delegation 
function" which is one of the functions which MULTOS known as an operating system for IC 
cards has, for example. 
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[0068]This delegation function is explained using drawing 8 . In drawing 8 , the program A650 
and the program B651 are stored in IC card 101. First, when the settlement system 100 
publishes the command A of APDU form to the program A650, the program A650 publishes 
the command B of APDU form to the program B651, and makes the program B651 execute 
arbitrary processings by proxy. Next, the program B651 is returned to the program A650 by 
making the result of vicarious execution processing into the response B. And the program 
A650 returns the response A to the settlement system 100 based on the result of the response 
B. 

[0069]As explained above, if a program with IC card 101 inside receives a command from the 
IC card 101 exterior, The function made to execute by proxy by transmitting a command to 
other programs which are in IC card 101 inside in a part of processing performed based on the 
received command is called a delegation function. 

[0070]ln this embodiment, although the delegation function mentioned above is used, it does 
not matter even if it is the composition using other operating systems which have a function 
equivalent to a delegation function as an operating system of an IC card even if it does not use 
MULTOS. 

[0071]Next, the process flow of the settlement system 100 concerning this embodiment is 
explained. Drawing 9 is a flow chart in case the cardholder 102 performs settling processing 
with the settlement system 100 using IC card 101. In this example, the command which the 
settlement system 100 transmits to IC card 101 shall use APDU form. The IC card stores the 
service program 131 and the PIN control program 132, and the settlement system 100, It shall 
communicate simultaneously, using logical channel B as a logical channel number of the 
command published to the PIN control program 132 using logical channel A as a logical 
channel number of the command published to the service program 1 31 . 
[0072]First, if IC card 101 is inserted in the settlement system 100, initialization processing of 
an IC card will be performed as Step S800. In this processing, the settlement system 100 
transmits a reset request to IC card 101, and receiving a reset response from IC card 101 after 
that is performed. 

[0073]Next, the settlement system 100 chooses the service program 131 stored in IC card 101 
by the cardholder's 102 selection, etc. as Step S801. In this processing, the dedicated file in 
which the service program 131 is stored is first chosen by the settlement system 100 
publishing a file selection command to IC card 101 using logical channel A. It continues, and 
processing based on the service program 131 is performed until PIN attestation is needed, 
because the settlement system 100 publishes a specific command to the service program 131 
using logical channel A. 

[0074]Here, before performing PIN attestation, the settlement system 100 publishes a file 
selection command to IC card 101, using logical channel B as Step S802, and chooses the 
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dedicated file in which the PIN control program 132 is stored. 

[0075]Next, when the cardholder 102 inputs common PIN into the settlement system 100, the 
settlement system 100 transmits common PIN to IC card 101, and makes PIN verification 
perform by IC card 101 inside as Step S803. In this processing, the settlement system 100 
publishes an PIN verification command to the PIN control program 132 first using logical 
channel B. Here, common PIN and the application identifier AID corresponding to the service 
program 131 shall be stored in an PIN verification command. Next, the PIN control program 
132 will extract individual PIN according to the procedure explained using drawing 4 by a 1st 
embodiment, if these data is acquired. Next, the PIN control program 132 publishes the PIN 
verification command which stored extracted individual PIN to the service program 131, makes 
individual PIN compare with the service program 131, and acquires a matching result. And the 
PIN control program 132 replies a matching result to the settlement system 100. Here, 
processing of Step S803 is realizable by using the delegation function mentioned above. 
[0076]After PIN attestation is completed according to the procedure explained above, as Step 
S804, the terminal 100 is specific to IC card 101, carries out command issue of the remaining 
settling processings to it, and is continued. 

[0077]Next, a 4th embodiment is described. First, the composition of the IC card and 
settlement system concerning this embodiment is shown in drawing 10 . Although the 
composition shown in drawing 10 is the same as the composition shown in drawing 1 by 
explanation of a 1st embodiment, the point that the PIN input means 113 replaced the 
fingerprint reading means 190 differs from the point that the cardholder 102 does not need to 
memorize common PIN105. 

[0078]Here, the fingerprint reading means 190 identifies the cardholder's 102 fingerprint, and 
has the function to extract fingerprint information, therefore - it is that the cardholder 102 
makes his fingerprint identify by the fingerprint reading means 190 in this embodiment instead 
of inputting PIN into the settlement system 100 -- the person himself/herself - it attests. 
[0079]Next, the composition of the information stored in the IC card concerning this 
embodiment is shown in drawing 11 . Although the composition shown in drawing 1 1 is the 
same as the composition shown in drawing 2 by explanation of a 1st embodiment, It differs in 
that AID, the data 144A, 144B, and 144C which comprises individual PIN, and the fingerprint 
information 191 are stored instead of storing the PIN management data 142A, 142B, and 142C 
in the PIN management dedicated file 122. Here, AID which constitutes the data 144A 
corresponds to the dedicated file 121 A, and individual PIN is used for the off-line PIN 
attestation performed by the service program 131 A stored in the dedicated file 121 A. Similarly 
AID which constitutes the data 144B corresponds to the dedicated file 121 B, and individual 
PIN is used for the off-line PIN attestation performed by the service program 131B. AID which 
constitutes the data 144C corresponds to the dedicated file 121 C, and individual PIN is used 
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for the on-line PIN attestation performed by the service program 131C. The fingerprint 
information 191 is information corresponding to the cardholder's 102 fingerprint. Unless 
collation of the fingerprint information 191 is successful, it has come to be unable to perform 
reading the data 144A, 144B, and 144C to the exterior here. 

[0080]Next, a process flow of the settlement system 100 concerning this embodiment is 
explained. Drawing 12 is a flow chart in case the cardholder 102 performs settling processing 
with the settlement system 100 using IC card 101. Although a flow chart shown in drawing 12 
is the same to a flow shown in drawing 7 by explanation of a 2nd embodiment, and Step S702, 
it differs in that the cardholder 102 is making the settlement system 100 identify a fingerprint 
instead of inputting common PIN into the settlement system 100. 
[0081]That is, a fingerprint which the settlement system 100 identified is changed into 
fingerprint information by a fingerprint reading means, and the settlement system 100 transmits 
fingerprint information to IC card 101, and has specific individual PIN replied from IC card 101 
in Step S1000. In this processing, the settlement system 100 publishes an individual PIN 
acquisition command to the PIN control program 132. An application identifier corresponding to 
fingerprint information and the service program 131 is stored in an individual PIN command 
here, and the PIN control program 132, When an individual PIN command was received, 
fingerprint information is compared and collation is successful, individual PIN corresponding to 
a specified application identifier is returned to the settlement system 100. The settlement 
system 100 is using this individual PIN, and it becomes possible to perform the same PIN 
attestation as a 2nd embodiment. 

[0082]As explained above, when the cardholder 102 receives one which can be performed of 
services using IC card 101, in this embodiment, it becomes possible to make the settlement 
system 100 only identify a fingerprint, and to perform PIN attestation which needs to be 
performed for every service. The cardholder 102 inputs common PIN here instead of making 
the settlement system 100 identify a fingerprint, When common PIN is recorded and collation 
of common PIN is successful within IC card 101 instead of recording fingerprint information on 
IC card 101, even if it is the composition which can read individual PIN from an IC card, it is a 
scope of this invention. 
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[Brief Description of the Drawings] 

[Drawing 1] The figure showing the composition of the IC card and terminal concerning a 1st 
embodiment of this invention. 

[Drawing 2] The figure showing the composition of the information stored in the IC card 
concerning a 1st embodiment of this invention. 

[Drawing 3] The figure showing the composition and the generation procedure of the PIN 
management data concerning a 1st embodiment of this invention. 
[Drawing 4] The figure showing the decoding procedure of the PIN management data 
concerning a 1st embodiment of this invention. 

[Drawing 5] The figure showing the process flow of the settlement system concerning a 1st 
embodiment of this invention. 

[Drawing 6] The figure showing the composition of the command concerning a 2nd embodiment 
of this invention. 

[Drawing 7] The figure showing the process flow of the settlement system concerning a 2nd 
embodiment of this invention. 

[Drawing 8] The figure showing the process flow of the communication between programs 
concerning a 3rd embodiment of this invention. 

[Drawing 9] The figure showing the process flow of the settlement system concerning a 3rd 
embodiment of this invention. 

[Drawing 10] The figure showing the composition of the IC card and terminal concerning a 4th 
embodiment of this invention. 

[Drawing 11] The figure showing the composition of the information stored in the IC card 
concerning a 4th embodiment of this invention. 

[Drawing 12] The figure showing the process flow of the settlement system concerning a 4th 
embodiment of this invention. 

[Drawing 13] The figure showing the file organization of an IC card. 
[Explanations of letters or numerals] 

1 00 Settlement system 

101 IC card 

102 Cardholder 

103 Salesclerk 

104 Network 

105 Common PIN 

1 1 0 Card write means 

1 1 1 Arithmetic processing means 
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1 12 A displaying means 

1 13 An PIN input means 

114 An information accumulation means 

115 A control means 

1 1 6 A means of communication 

1 17 A means of communication 

118 An information accumulation means 

1 19 An arithmetic processing means 
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